Lonestar137 / cap-lab

Testing various Linux capabilities in containers.

Capabilities

Capabilities can be set on an executable file to allow certain admin permissions for the process.

i.e.

sudo setcap cap_net_raw,cap_sys_nice=eip /usr/bin/podman