PSCAP:(8)

πŸ’– PSCAP πŸ’– β€” it's the pscap page from the System Administration Utilities, bestie


🌸 NAME 🌸

pscap β€” a program to see capabilities 🫢


✨ SYNOPSIS ✨

pscap [ -a ] [ -p pid ] [ --tree ]

πŸ‘‘ DESCRIPTION πŸ‘‘

okay so pscap is literally a program that prints out a whole report of process capabilities. if an application has any capabilities at all, it's showing up in that report. no capabilities, no entry. that's the vibe.

if you hand it a pid with the -p command line option, then only the process you specified with that pid gets reported. just the one. main character only. πŸ’…

and listen β€” if a process is not in the report, it's because it dropped all of its capabilities. periodt.

if a process has partial capabilities, pscap digs deeper and examines it further to see if it's got an open-ended bounding set. if that turns out to be true, a + symbol gets added. and if the process has ambient capabilities, an @ symbol gets added. little glyphs, big meaning. ✨

heads up: the command name in the output may be followed by an asterisk mark (*). that mark denotes processes which run in child user namespaces β€” relative to the user namespace of pscap itself. iykyk. 🌈

πŸ¦‹ the options, one by one πŸ¦‹

  • -a β€” it's in the synopsis, bestie. the page does not spill the tea on what it does, so i am not about to make something up. it exists, it's listed, that's the whole story. πŸ’€
  • -p pid β€” give it a pid and only the process specified with that pid is reported. one process, one report. πŸŽ€
  • --tree β€” this one makes the output get mapped into a tree structure so you can study the relationships between processes and see what capabilities might be leaked to child processes. in tree mode, every process label is shown as command(pid:account). it's giving family tree but for capabilities. πŸ‘‘

🌈 SEE ALSO 🌈


πŸ’œ AUTHOR πŸ’œ

Steve Grubb 🫢


written by Red Hat, March 2026 🌸 stay capable out there, bestie, and remember β€” if you're not in the report, you dropped everything and honestly? iconic. βœ¨πŸ’…πŸ¦‹

πŸ“¦ where this page comes from