CAPNG_HAVE_CAPABILITIES(3)

💖 CAPNG_HAVE_CAPABILITIES 💖

okay bestie, so this one is from the Libcap-ng API and it's literally just two little functions that peek at your capabilities and tell you what's up 👀 no cap, that's the whole vibe.

✨ NAME ✨

capng_have_capabilities, capng_have_permitted_capabilities — check for capabilities 🕵️♀️

🌸 SYNOPSIS 🌸

#include <cap-ng.h>

capng_results_t capng_have_capabilities(capng_select_t set);
capng_results_t capng_have_permitted_capabilities(void);

🦋 DESCRIPTION 🦋

So capng_have_capabilities looks at the internal capability sets you picked and reports back what the status is, periodt. Quick warning though: those sets have to be set up before you call this — like, you gotta run capng_get_caps_process, or capng_get_caps_fd, or set them up some other way first. It's giving "you can't vibe check a set that doesn't exist yet" 💅

When you call it, you pass in which set you wanna check:

• CAPNG_SELECT_CAPS — the traditional capabilities, the OGs
• CAPNG_SELECT_BOUNDS — the bounding set
• CAPNG_SELECT_BOTH — if you want both of the above, bestie
• CAPNG_SELECT_AMBIENT — if you're only checking the ambient capabilities
• CAPNG_SELECT_ALL — if you wanna test all the sets, main character energy

And here's the tea 🍵: when it checks capabilities, it only looks at the effective capabilities. That's it. That's the whole check.

BUT. If the source of your capabilities comes from a file, then you might also need to check the permitted capabilities. That's literally why capng_have_permitted_capabilities exists — it was created for exactly this situation. It takes no arguments because it's unbothered, it simply checks the permitted set. Iconic behaviour honestly 🫶

⭐ RETURN VALUE ⭐

This function returns one of these four values, and they're all self explanatory fr fr:

• CAPNG_FAIL
• CAPNG_NONE
• CAPNG_PARTIAL
• CAPNG_FULL

🌈 SEE ALSO 🌈

• capng_get_caps_process(3)
• capng_get_caps_fd(3)
• capng_have_capability(3)
• capabilities(7)

👑 AUTHOR 👑

Steve Grubb ✨

Red Hat 🎀 Sept 2020 🦋 Libcap-ng API — okay that's the whole page bestie, go forth and check those capabilities, you ate 💅💖✨