Skip to content

feat: Add support for POSIX 1003.1e capabilities #1219

@ralphm

Description

@ralphm

From the archlinux wiki:

Capabilities (POSIX 1003.1e, capabilities(7)) provide fine-grained control over superuser permissions, allowing use of the root user to be avoided.
[..]
Capabilities are implemented on Linux using extended attributes (xattr(7)) in the security namespace.

Currently, when using -@, you get:

/usr/libexec/netdata/plugins.d$ ls -al@ apps.plugin
.rwxr-x---@ 567k root  5 Nov 01:27  apps.plugin
                                   └── security.capability: "\u{1}\0\0\u{2}\u{4}\0\u{8}\0\u{4}\0\u{8}"

Decoding this using getcap yields:

/usr/libexec/netdata/plugins.d$ getcap apps.plugin
apps.plugin cap_dac_read_search,cap_sys_ptrace=eip

It would be nice if eza could decode the capabilities, and show this as follows (possibly by a new flag):

.rwxr-x---@ 567k root  5 Nov 01:27  apps.plugin
                                   └── security.capability: cap_dac_read_search,cap_sys_ptrace=eip

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions