Crate caps

A pure-Rust library to work with Linux capabilities.

It provides support for manipulating capabilities available in modern Linux kernel. It supports traditional POSIX sets (Effective, Inheritable, Permitted) as well as Linux-specific Ambient and Bounding capabilities sets.

use caps::{Capability, CapSet};

fn manipulate_caps() {
    if caps::has_cap(None, CapSet::Permitted, Capability::CAP_SYS_NICE).unwrap() {
        caps::drop(None, CapSet::Effective, Capability::CAP_SYS_NICE).unwrap();
        let s = caps::read(None, CapSet::Effective).unwrap();
        assert_eq!(s.contains(&Capability::CAP_SYS_NICE), false);
        caps::clear(None, CapSet::Effective).unwrap();
    };
}

Structs

CapsVariantNames
CapsVariants
Error	The Error type.

Enums

CapSet	Linux capabilities sets.
Capability	Linux capabilities.
ErrorKind	The kind of an error.

Traits

ResultExt

Additional methods for Result, for easy interaction with this crate.

Functions

clear	Clear all capabilities in a set for a thread.
drop	Drop a single capability from a set for a thread.
has_cap	Check if a thread contains a capability in a set.
raise	Raise a single capability in a set for a thread.
read	Return all capabilities in a set for a thread.
set	Set a capability set for a thread to a new value.

Type Definitions

CapsHashSet	An HashSet specialized on Capability.
Result	Convenient wrapper around std::Result.