capabilities - Manage Linux capabilities

Author:Nate Coraor <nate@bx.psu.edu>

Synopsis

New in version 1.6.

This module manipulates files privileges using the Linux capabilities(7) system.

Options

parameter required default choices comments
capability yes
    Desired capability to set (with operator and flags, if state is present) or remove (if state is absent)
    path yes
      Specifies the path to the file to be managed.
      state no present
      • present
      • absent
      Whether the entry should be present or absent in the file's capabilities.

      Examples


      # Set cap_sys_chroot+ep on /foo
      - capabilities: path=/foo capability=cap_sys_chroot+ep state=present
      
      # Remove cap_net_bind_service from /bar
      - capabilities: path=/bar capability=cap_net_bind_service state=absent
      

      Note

      The capabilities system will automatically transform operators and flags into the effective set, so (for example, cap_foo=ep will probably become cap_foo+ep). This module does not attempt to determine the final operator and flags to compare, so you will want to ensure that your capabilities argument matches the final capabilities.

      Table Of Contents

      Previous topic

      authorized_key - Adds or removes an SSH authorized key

      Next topic

      cron - Manage cron.d and crontab entries.