---
name: "capsh"
section: "8"
platform: "linux"
package: "libcap2-bin"
version: "1:2.22-1.2"
release: "Debian 7 (Wheezy)"
platforms: ["linux"]
url: "https://new.carta.tech/capsh/8"
---

# capsh(8)

'bash' wrapper to raise and lower the bset and pI capabilities

## NAME

capsh - 'bash' wrapper to raise and lower the bset and pI capabilities

## DESCRIPTION

**/sbin/capsh** \[args ...\]

- **--help**

  this message

- **--print**

  display capability relevant state

- **--decode**=*xxx*

  decode a hex string to a list of caps

- **--drop**=*xxx*

  remove xxx,.. capabilities from bset

- **--caps**=*xxx*

  set caps as per cap\_from\_text()

- **--inh**=*xxx*

  set xxx,.. inheritiable set

- **--secbits=**\<n\>

  write a new value for securebits

- **--keep=**\<n\>

  set keep-capabability bit to \<n\>

- **--uid=**\<n\>

  set uid to \<n\> (hint: id \<username\>)

- **--chroot**=*path*

  [chroot(2)](/chroot/2.md) to this path to invoke bash

- **--killit=**\<n\>

  send signal(n) to child

- **--forkfor=**\<n\>

  fork and make child sleep for \<n\> sec

- **==**

  re-exec(capsh) with args as for **--**

- **--**

  remaing arguments are for /bin/bash (without **--** \[/sbin/capsh\] will simply exit(0))