filecap(8) — Linux manual page

FILECAP:(8)          System Administration Utilities          FILECAP:(8)

NAME         top

       filecap - a program to see capabilities

SYNOPSIS         top

       filecap [ -a | -d | /dir | /dir/file [cap1 cap2 ...] ]

DESCRIPTION         top

       filecap is a program that prints out a report of programs with
       file based capabilities. If a file is not in the report or there
       is no report at all, no capabilities were found. For expedience,
       the default is to check only the directories in the PATH
       environmental variable. If the -a command line option is given,
       then all directories will be checked. If a directory is passed, it
       will recursively check that directory. If a path to a file is
       given, it will only check that file. If a file is given followed
       by capabilities, then the capabilities are written to the file.

OPTIONS         top

       -a     This tells the program to show all capabilities starting
              from the / directory. Normally the PATH environmental
              variable is used to show you capabilities on files you are
              likely to execute.

       -d     This dumps all capabilities for reference.

EXAMPLES         top

       To check file capabilities in $PATH:
       filecap

       To check file capabilities of whole system:
       filecap -a

       To check file capabilities recursively in a directory:
       filecap /usr

       To check file capabilities of a specific program:
       filecap /bin/passwd

       To list all possible capabilities:
       filecap -d

       To set a file capability on a specific program:
       filecap /bin/ping net_raw net_admin

       To remove file capabilities on a specific program:
       filecap /bin/ping none

SEE ALSO         top

       pscap(8), netcap(8), capabilities(7).

AUTHOR         top

       Steve Grubb

COLOPHON         top

       This page is part of the libcap-ng (capabilities commands and
       library (NG)) project.  Information about the project can be found
       at ⟨https://people.redhat.com/sgrubb/libcap-ng/⟩.  It is not known
       how to report bugs for this man page; if you know, please send a
       mail to man-pages@man7.org.  This page was obtained from the
       tarball fetched from
       ⟨https://people.redhat.com/sgrubb/libcap-ng/index.html⟩ on
       2025-08-11.  If you discover any rendering problems in this HTML
       version of the page, or you believe there is a better or more up-
       to-date source for the page, or you have corrections or
       improvements to the information in this COLOPHON (which is not
       part of the original manual page), send a mail to
       man-pages@man7.org

Red Hat                          Aug 2018                     FILECAP:(8)

Pages that refer to this page: capabilities(7),  captest(8),  netcap(8),  pscap(8)

HTML rendering created 2025-09-06 by Michael Kerrisk, author of The Linux Programming Interface. For details of in-depth Linux/UNIX system programming training courses that I teach, look here. Hosting by jambit GmbH.