macOS
brew install libcap-nglocal Homebrew formula metadata
安装
brew install libcap-nglocal Homebrew formula metadata
sudo apk add libcap-ngAlpine Linux edge package indexes · libcap-ng · 来源: dl-cdn.alpinelinux.org
sudo dnf install libcap-ngFedora Rawhide package metadata · libcap-ng · 来源: dl.fedoraproject.org
sudo pacman -S libcap-ngArch Linux sync databases · libcap-ng · 来源: geo.mirror.pkgbuild.com
sudo apt install libcap-ng-devDebian stable package indexes · libcap-ng-dev · 来源: deb.debian.org
nix profile install nixpkgs#libcap_ngnixpkgs package indexes · pkgs/by-name/li/libcap_ng/package.nix · 来源: api.github.com
sudo zypper install libcap-ng-developenSUSE Tumbleweed package metadata · libcap-ng-devel · 来源: download.opensuse.org
概览
Library for Linux that makes using posix capabilities easy
历史
libcap-ng is Steve Grubb's Linux capability library and utility suite, designed to make POSIX capability programming easier than the older libcap API.
The libcap-ng site states the design goal directly: make programming with POSIX capabilities easier than the traditional libcap library. Its README demonstrates common use cases such as dropping all capabilities, keeping selected capabilities, checking capability state, and retaining capabilities across UID changes.
The project paired the C library with administrative tools. netcap reports listening network processes and their capabilities, pscap reports privileged processes, filecap searches for files with file capabilities, and cap-audit can audit capability checks when built with the optional eBPF-based tooling.
libcap-ng was adopted by Linux distributions because it gives application developers and packagers a smaller API for privilege dropping, while giving administrators tools to inspect capability exposure across a running system.
Developers use capng_clear, capng_update, capng_apply, and related calls to drop or retain Linux capabilities. Administrators use pscap, netcap, and filecap to find over-privileged processes and files.
In package-manager terms, libcap-ng is a security plumbing package: it is rarely user-facing, but it makes least-privilege patches shorter and more reviewable. That is exactly the kind of small library that changes whether downstream packages actually drop privileges.
安全态势
library-like package without higher-risk signals.
绿色 风险 · 低 置信度 · appliance
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
filecap | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
netcap | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
pscap | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:libcap-ng |
|---|---|
| 版本 | 0.9.3 |
| 软件包管理器 | Homebrew |
| 主页 | https://people.redhat.com/sgrubb/libcap-ng/ |
| 仓库 | https://github.com/stevegrubb/libcap-ng |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。
libcap-ng-dev 0.8.5-4+b1
Development and header files for libcap-ng
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install libcap-ng-devlibcap-ng-utils 0.8.5-4+b1
Utilities for analysing and setting file capabilities
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install libcap-ng-utilslibcap-ng0 0.8.5-4+b1
alternate POSIX capabilities library
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install libcap-ng0python3-cap-ng 0.8.5-4+b1
Python3 bindings for libcap-ng
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install python3-cap-nglibcap_ng
nix profile install nixpkgs#libcap_nglibcap-ng-dev 0.8.4-2build2
Development and header files for libcap-ng
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install libcap-ng-devlibcap-ng-utils 0.8.4-2build2
Utilities for analysing and setting file capabilities
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install libcap-ng-utilslibcap-ng0 0.8.4-2build2
alternate POSIX capabilities library
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install libcap-ng0python3-cap-ng 0.8.4-2build2
Python3 bindings for libcap-ng
https://people.redhat.com/sgrubb/libcap-ng
sudo apt install python3-cap-nglibcap-ng 0.8.5-r2
POSIX capabilities library
https://people.redhat.com/sgrubb/libcap-ng/index.html
sudo apk add libcap-nglibcap-ng-dev 0.8.5-r2
POSIX capabilities library (development files)
https://people.redhat.com/sgrubb/libcap-ng/index.html
sudo apk add libcap-ng-devlibcap-ng-doc 0.8.5-r2
POSIX capabilities library (documentation)
https://people.redhat.com/sgrubb/libcap-ng/index.html
sudo apk add libcap-ng-doclibcap-ng-static 0.8.5-r2
POSIX capabilities library (static library)
https://people.redhat.com/sgrubb/libcap-ng/index.html
sudo apk add libcap-ng-staticlibcap-ng-utils 0.8.5-r2
posix capabilities utils
https://people.redhat.com/sgrubb/libcap-ng/index.html
sudo apk add libcap-ng-utilspy3-libcap-ng 0.8.5-r2
python bindings for libcap-ng
https://people.redhat.com/sgrubb/libcap-ng/index.html
sudo apk add py3-libcap-nglibcap-ng 0.9.3-4.fc45
Alternate posix capabilities library
https://github.com/stevegrubb/libcap-ng
sudo dnf install libcap-ng来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.