summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew G. Morgan <morgan@kernel.org>2021-04-17 16:46:46 -0700
committerAndrew G. Morgan <morgan@kernel.org>2021-04-17 16:46:46 -0700
commit13b97f953cb9a4bf50527b1d5c1d98ec96fb8ef4 (patch)
treece6d7b9d1411c7d5c6d82ce392ed783003274e30
parent1eb64332b1e6cde634b78d6f15f5ae98e6cfac99 (diff)
downloadlibcap2-13b97f953cb9a4bf50527b1d5c1d98ec96fb8ef4.tar.gz
Add some documentation for capsh --explain=cap_foo
This is a convenience parameter to describe in text the meaning of a specific capability. Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
-rw-r--r--doc/capsh.16
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/capsh.1 b/doc/capsh.1
index ab20c44..2b4a5ab 100644
--- a/doc/capsh.1
+++ b/doc/capsh.1
@@ -214,6 +214,12 @@ If the exit status does not match the signal being used to kill it, the
.B capsh
program exits with status 1.
.TP
+.BI \-\-explain= cap_xxx
+Give a brief textual description of what privileges the specified
+capability makes available to a running program. Note, instead of
+\fIcap_xxx\fP, one can provide a decimal number and \fBcapsh\fP will
+look up the corresponding capability's description.
+.TP
.BI \-\-decode= N
This is a convenience feature. If you look at
.B /proc/1/status