Linux Capabilities workshop

https://secure.meetupstatic.com/photos/event/1/1/d/6/600_464044566.jpeg

Linux Capabilities Workshop

In the context of Linux, a 'capability' is a token used by a process to prove that it is allowed to do an operation on an object. The capability identifies the object and the operations allowed on that object.

We will be looking at

As an example

$ getcap /usr/bin/ping

/usr/bin/ping = cap_net_raw+ep

$ getfattr -d -m "^security\."

/usr/bin/pingsecurity.capability=0sAQAAAgAgAAAAAAAAAAAAAAAAAAA=

To explore more,

$ man -S 7 capabilities

This is a "level 200" workshop.

Pre-requisite

• have attended the cgroup v2 and namespace workshop (on December 2).
• using a Linux environment on your laptop to work through the scenarios.

Date & Time
Sunday, December 3, 2017

9:30 AM to 1:00 PM

This is a "free of charge" FOSS event.