I ran capsh --print inside a container and saw this:

Securebits: 00/0x0/1'b0
 secure-noroot: no (unlocked)
 secure-no-suid-fixup: no (unlocked)
 secure-keep-caps: no (unlocked)  

What is Securebit ? can I change it ?

I searched for information here - lwn.net but didn't find the answer.

  • Unsurprisingly, manpages have enough info on this. Open man 7 capabilities, search for The securebits flags. – Danila Kiver Dec 10 '18 at 9:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.