usage: capsh [args ...] --help this message (or try 'man capsh') --print display capability relevant state --decode=xxx decode a hex string to a list of caps --supports=xxx exit 1 if capability xxx unsupported --drop=xxx remove xxx,.. capabilities from bset --caps=xxx set caps as per cap_from_text() --inh=xxx set xxx,.. inheritiable set --secbits=<n> write a new value for securebits --keep=<n> set keep-capabability bit to <n> --uid=<n> set uid to <n> (hint: id <username>) --gid=<n> set gid to <n> (hint: id <username>) --groups=g,... set the supplemental groups --user=<name> set uid,gid and groups to that of user --chroot=path chroot(2) to this path --killit=<n> send signal(n) to child --forkfor=<n> fork and make child sleep for <n> sec == re-exec(capsh) with args as for -- -- remaing arguments are for /bin/bash (without -- [capsh] will simply exit(0))

usage: capsh [args ...] --help this message (or try 'man capsh') --print display capability relevant state --decode=xxx decode a hex string to a list of caps --supports=xxx exit 1 if capability xxx unsupported --drop=xxx remove xxx,.. capabilities from bset --caps=xxx set caps as per cap_from_text() --inh=xxx set xxx,.. inheritiable set --secbits=<n> write a new value for securebits --keep=<n> set keep-capabability bit to <n> --uid=<n> set uid to <n> (hint: id <username>) --gid=<n> set gid to <n> (hint: id <username>) --groups=g,... set the supplemental groups --user=<name> set uid,gid and groups to that of user --chroot=path chroot(2) to this path --killit=<n> send signal(n) to child --forkfor=<n> fork and make child sleep for <n> sec == re-exec(capsh) with args as for -- -- remaing arguments are for /bin/bash (without -- [capsh] will simply exit(0))