Beyond Linux® From Scratch - Version 7.4

Chapter 4. Security

libcap2-2.22

Introduction to libcap2

The libcap2 package implements the user-space interfaces to the POSIX 1003.1e capabilities available in Linux kernels. These capabilities are a partitioning of the all powerful root privilege into a set of distinct privileges.

This package is known to build and work properly using an LFS-7.4 platform.

Package Information

libcap2 Dependencies

Required

attr-2.4.47

Optional

Linux-PAM-1.1.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libcap2

Installation of libcap2

Install libcap2 by running the following commands: 

make

This package does not come with a test suite.

If you want to disable installing the static library, use this sed: 

sed -i '/install.*STALIBNAME/ s/^/#/' libcap/Makefile

Now, as the root user: 

make RAISE_SETFCAP=no install

Command Explanations

RAISE_SETFCAP=no: This parameter skips trying to use setcap on itself. This avoids an installation error if the kernel or file system do not support extended capabilities.

Contents

Installed Programs: capsh, getcap, getpcaps, and setcap
Installed Library: libcap.{so,a}
Installed Directories: None

Short Descriptions

capsh

is a shell wrapper to explore and constrain capability support.

getcap

examines file capabilities.

getpcaps

displays the capabilities on the queried process(es).

setcap

sets file file capabilities.

libcap.{so,a}

contains the libcap2 API functions.

Last updated on 2013-08-20 15:41:29 -0700