DESCRIPTION

--help

this message

--print

display capability relevant state

--decode=xxx

decode a hex string to a list of caps

--drop=xxx

remove xxx,.. capabilities from bset

--caps=xxx

set caps as per cap_from_text()

--inh=xxx

set xxx,.. inheritiable set

--secbits=<n>

write a new value for securebits

--keep=<n>

set keep-capabability bit to <n>

--uid=<n>

set uid to <n> (hint: id <username>)

--chroot=path

chroot(2) to this path to invoke bash

--killit=<n>

send signal(n) to child

--forkfor=<n>

fork and make child sleep for <n> sec

==

re-exec(capsh) with args as for --

--

remaing arguments are for /bin/bash (without -- [/sbin/capsh] will simply exit(0))