Feature request - Add file.capabilities (Linux) #1020
Draft
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Checklist
make test-all
(UNIX) passes. CI will also test thisDescription of change
This is a new test feature included in
file
test calledcapabilities
.It aims to add a simple way to test for file Linux effective capabilities .
The test uses this Golang package https://github.com/syndtr/gocapability .
Usage:
It will test if the file has the capabilities
CAP_PERFMON
andCAP_SYS_ADMIN
, if not the test fails.One problem with that is to use the
enum
syntax to describe capabilities (see caps enums). I think it would be easier for user to write the name of the capability instead of a number but it requires to add code to transform enum in string, so I was not sure about it in term of code simplicity.This PR is related to this issue #971 .
📚 Documentation preview 📚: https://goss--1020.org.readthedocs.build/en/1020/