:py:mod:`dissect.target.plugins.filesystem.unix.capability`
===========================================================

.. py:module:: dissect.target.plugins.filesystem.unix.capability


Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.target.plugins.filesystem.unix.capability.Capabilities
   dissect.target.plugins.filesystem.unix.capability.CapabilityPlugin




Attributes
~~~~~~~~~~

.. autoapisummary::

   dissect.target.plugins.filesystem.unix.capability.CapabilityRecord
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_REVISION_MASK
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_REVISION_SHIFT
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_FLAGS_MASK
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_FLAGS_EFFECTIVE
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_REVISION_1
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_U32_1
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_REVISION_2
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_U32_2
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_REVISION_3
   dissect.target.plugins.filesystem.unix.capability.VFS_CAP_U32_3


.. py:data:: CapabilityRecord

   

.. py:data:: VFS_CAP_REVISION_MASK
   :value: 4278190080

   

.. py:data:: VFS_CAP_REVISION_SHIFT
   :value: 24

   

.. py:data:: VFS_CAP_FLAGS_MASK

   

.. py:data:: VFS_CAP_FLAGS_EFFECTIVE
   :value: 1

   

.. py:data:: VFS_CAP_REVISION_1
   :value: 16777216

   

.. py:data:: VFS_CAP_U32_1
   :value: 1

   

.. py:data:: VFS_CAP_REVISION_2
   :value: 33554432

   

.. py:data:: VFS_CAP_U32_2
   :value: 2

   

.. py:data:: VFS_CAP_REVISION_3
   :value: 50331648

   

.. py:data:: VFS_CAP_U32_3
   :value: 2

   

.. py:class:: Capabilities


   Bases: :py:obj:`enum.IntEnum`

   Enum where members are also (and must be) ints

   .. py:attribute:: CAP_CHOWN
      :value: 0

      

   .. py:attribute:: CAP_DAC_OVERRIDE
      :value: 1

      

   .. py:attribute:: CAP_DAC_READ_SEARCH
      :value: 2

      

   .. py:attribute:: CAP_FOWNER
      :value: 3

      

   .. py:attribute:: CAP_FSETID
      :value: 4

      

   .. py:attribute:: CAP_KILL
      :value: 5

      

   .. py:attribute:: CAP_SETGID
      :value: 6

      

   .. py:attribute:: CAP_SETUID
      :value: 7

      

   .. py:attribute:: CAP_SETPCAP
      :value: 8

      

   .. py:attribute:: CAP_LINUX_IMMUTABLE
      :value: 9

      

   .. py:attribute:: CAP_NET_BIND_SERVICE
      :value: 10

      

   .. py:attribute:: CAP_NET_BROADCAST
      :value: 11

      

   .. py:attribute:: CAP_NET_ADMIN
      :value: 12

      

   .. py:attribute:: CAP_NET_RAW
      :value: 13

      

   .. py:attribute:: CAP_IPC_LOCK
      :value: 14

      

   .. py:attribute:: CAP_IPC_OWNER
      :value: 15

      

   .. py:attribute:: CAP_SYS_MODULE
      :value: 16

      

   .. py:attribute:: CAP_SYS_RAWIO
      :value: 17

      

   .. py:attribute:: CAP_SYS_CHROOT
      :value: 18

      

   .. py:attribute:: CAP_SYS_PTRACE
      :value: 19

      

   .. py:attribute:: CAP_SYS_PACCT
      :value: 20

      

   .. py:attribute:: CAP_SYS_ADMIN
      :value: 21

      

   .. py:attribute:: CAP_SYS_BOOT
      :value: 22

      

   .. py:attribute:: CAP_SYS_NICE
      :value: 23

      

   .. py:attribute:: CAP_SYS_RESOURCE
      :value: 24

      

   .. py:attribute:: CAP_SYS_TIME
      :value: 25

      

   .. py:attribute:: CAP_SYS_TTY_CONFIG
      :value: 26

      

   .. py:attribute:: CAP_MKNOD
      :value: 27

      

   .. py:attribute:: CAP_LEASE
      :value: 28

      

   .. py:attribute:: CAP_AUDIT_WRITE
      :value: 29

      

   .. py:attribute:: CAP_AUDIT_CONTROL
      :value: 30

      

   .. py:attribute:: CAP_SETFCAP
      :value: 31

      

   .. py:attribute:: CAP_MAC_OVERRIDE
      :value: 32

      

   .. py:attribute:: CAP_MAC_ADMIN
      :value: 33

      

   .. py:attribute:: CAP_SYSLOG
      :value: 34

      

   .. py:attribute:: CAP_WAKE_ALARM
      :value: 35

      

   .. py:attribute:: CAP_BLOCK_SUSPEND
      :value: 36

      

   .. py:attribute:: CAP_AUDIT_READ
      :value: 37

      

   .. py:attribute:: CAP_PERFMON
      :value: 38

      

   .. py:attribute:: CAP_BPF
      :value: 39

      

   .. py:attribute:: CAP_CHECKPOINT_RESTORE
      :value: 40

      


.. py:class:: CapabilityPlugin(target: dissect.target.Target)


   Bases: :py:obj:`dissect.target.plugin.Plugin`

   Plugin to yield files with capabilites set.

   .. py:method:: check_compatible() -> None

      Perform a compatibility check with the target.

      This function should return ``None`` if the plugin is compatible with
      the current target (``self.target``). For example, check if a certain
      file exists.
      Otherwise it should raise an ``UnsupportedPluginError``.

      :raises UnsupportedPluginError: If the plugin could not be loaded.


   .. py:method:: capability_binaries()

      Find all files that have capabilities set.