What is 'setcap' command and 'file capability'?

25,501

In the link you provided , the use setcap Sniffing with Wireshark as a Non-Root User because, by default, raw access to network interfaces (e.g. eth0) requires root privileges and running it with root privileges is a bad idea .

setcap - set file capabilities

man page Link

Check file system capabilities Man Page

CAP_NET_ADMIN - Allow various network-related operations (e.g., setting privileged socket options, enabling multicasting, interface configuration, modifying routing tables).



CAP_NET_RAW - Permit use of RAW and PACKET sockets.

For more info Site

Share:
25,501

Related videos on Youtube

Mohammad Reza Rezwani
Author by

Mohammad Reza Rezwani

Msc of computer networks.

Updated on September 18, 2022

Comments

  • Mohammad Reza Rezwani
    Mohammad Reza Rezwani almost 2 years

    What is the setcapcommand and what is file capability, also the meaning of below "setcap output:

    CAP_NET_RAW+eip CAP_NET_ADMIN+eip "/usr/bin/dumpcap"
    

    Running Wireshark - "Lua: Error during loading"