[LWN Logo]

Linux Weekly News
Daily updates
Linux Stocks Page
Penguin Gallery
Book Reviews

Contact us

December 2, 1999

Linux capability values

The following is a list of the capability values as defined in the 2.2.13 kernel; they are taken from the kernel source in ...include/linux/capability.h.

Capabilities 0 through 7 are defined (in draft form) by Posix; the rest are Linux-specific.

NameNumberDescription
CAP_CHOWN 0Override restrictions on changing file ownership
CAP_DAC_OVERRIDE 1Override access restrictions on files
CAP_DAC_READ_SEARCH 2Override restrictions on read and search of files and directories
CAP_FOWNER 3Override restrictions on files when owned by process
CAP_FSETID 4Allow setting setuid bits (not implemented)
CAP_KILL 5Allow sending signals to processes owned by others
CAP_SETGID 6Allow group ID manipulation
CAP_SETUID 7Allow user id manipulation
CAP_SETPCAP 8Transfer capabilities to other processes
CAP_LINUX_IMMUTABLE 9Allow modification of immutable and append-only file attributes
CAP_NET_BIND_SERVICE 10Allow binding to sockets below 1024
CAP_NET_BROADCAST 11Allow network broadcasting and multicast access
CAP_NET_ADMIN 12Allow net admin tasks - interfaces, firewalls, routing, ...
CAP_NET_RAW 13Allow use of raw sockets
CAP_IPC_LOCK 14Allow locking of memory segments
CAP_IPC_OWNER 15Override IPC ownership checks
CAP_SYS_MODULE 16Insert and remove kernel modules
CAP_SYS_RAWIO 17Allow access to ioperm and iopl
CAP_SYS_CHROOT 18Allow use of chroot()
CAP_SYS_PTRACE 19Allow tracing of any process
CAP_SYS_PACCT 20Allow configuration of process accounting
CAP_SYS_ADMIN 21Many sys admin tasks: mount, quotas, swapping, much more
CAP_SYS_BOOT 22Allow rebooting the system
CAP_SYS_NICE 23Allow raising priority, setting other process priority
CAP_SYS_RESOURCE 24Override resource limits
CAP_SYS_TIME 25Allow changing the system clock
CAP_SYS_TTY_CONFIG 26Allow configuration of tty devices

--jc

Eklektix, Inc. Linux powered! Copyright 1999 Eklektix, Inc. all rights reserved.
Linux ® is a registered trademark of Linus Torvalds