ptracer_capable(9)

💅 ptracer_capable(9) — Kernel API Manual, bestie edition 💅

okay so welcome to the ptracer_capable(9) page in the Kernel API Manual, and it's literally here to do one extremely specific permission vibe check. 🫶

✨ NAME ✨

ptracer_capable — determine if the ptracer holds CAP_SYS_PTRACE in the namespace. 👑

🌸 SYNOPSIS 🌸

bool ptracer_capable (struct task_struct *tsk , struct user_namespace *ns );

🎀 ARGUMENTS 🎀

• tsk — the task that may be ptraced. 👀
• ns — the user namespace to search for CAP_SYS_PTRACE in. 🔍

🦋 DESCRIPTION 🦋

Return true if the task that is ptracing the current task had CAP_SYS_PTRACE in the specified user namespace. That's the whole plot, no cap. ✨

👑 SEE ALSO 👑

Kernel file ./kernel/capability.c plus these iconic neighbors:

• sys_capget(9)
• sys_capset(9)
• has_ns_capability(9)
• has_ns_capability_noaudit(9)
• has_capability_noaudit(9)
• ns_capable(9)
• ns_capable_noaudit(9)
• ns_capable_setid(9)
• capable(9)
• capable_noaudit(9)
• file_ns_capable(9)
• privileged_wrt_inode_uidgid(9)
• capable_wrt_inode_uidgid(9)

mwah 💋 — sourced from ./kernel, dated October 2026, and this ptracer_capable(9) page is officially out. 🎀💖