TL;DR: Fine-grained subset of root powers. Specific caps are equivalent to root: SYS_ADMIN, DAC_READ_SEARCH, SYS_PTRACE.

Stub — to be filled in.

What it is

TODO

Preconditions / where it applies

TODO

Technique

TODO

Detection and defence

TODO

References

• https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/linux-capabilities.html