ansible.builtin.capabilities (v2.9.27) — module

Manage Linux capabilities

| "added in version" 1.6 of ansible.builtin"

Authors: Nate Coraor (@natefoo)

preview | supported by community

Install Ansible via pip

Install with pip install ansible==2.9.27

Description

This module manipulates files privileges using the Linux capabilities(7) system.

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Set cap_sys_chroot+ep on /foo
  capabilities:
    path: /foo
    capability: cap_sys_chroot+ep
    state: present
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Remove cap_net_bind_service from /bar
  capabilities:
    path: /bar
    capability: cap_net_bind_service
    state: absent

Inputs

    
path:
    aliases:
    - key
    description:
    - Specifies the path to the file to be managed.
    required: true
    type: str

state:
    choices:
    - absent
    - present
    default: present
    description:
    - Whether the entry should be present or absent in the file's capabilities.
    type: str

capability:
    aliases:
    - cap
    description:
    - Desired capability to set (with operator and flags, if state is C(present)) or remove
      (if state is C(absent))
    required: true
    type: str