NAME
capsh - 'bash' wrapper to raise and lower the bset and pI capabilities
DESCRIPTION
/sbin/capsh [args ...]
--help this message
--print
display capability relevant state
--decode=xxx
decode a hex string to a list of caps
--drop=xxx
remove xxx,.. capabilities from bset
--caps=xxx
set caps as per cap_from_text()
--inh=xxx
set xxx,.. inheritiable set
--secbits=<n>
write a new value for securebits
--keep=<n>
set keep-capabability bit to <n>
--uid=<n>
set uid to <n> (hint: id <username>)
--chroot=path
chroot(2) to this path to invoke bash
--killit=<n>
send signal(n) to child
--forkfor=<n>
fork and make child sleep for <n> sec
== re-exec(capsh) with args as for --
-- remaing arguments are for /bin/bash (without -- [/sbin/capsh]
will simply exit(0))