|
|
Linux temps réel embarqué et outils de développements
|
Technique |
|
lcap
lcap | Removes 'capabilities' in the kernel, making the system more secure | Priority | |
Section | admin |
Installed size | 64 |
Maintainer | Christian Hudon <chrish@debian.org> |
Architecture | i386 |
Version | 0.0.6-3.1 |
Depends | libc6 (>= 2.3.5-1) |
Suggests | cabextract |
File name | pool/main/l/lcap/lcap_0.0.6-3.1_i386.deb |
Description | Capabilities are a form of kernel-based access control. This program provides a user-friendlier way than setting proc/sys/kernel/cap-bound by hand to remove capabilities from your Linux kernel. . For example, you can remove the capability to load kernel modules by executing 'lcap CAP_SYS_MODULE' as root. Then no one, not even root, can load modules into your kernel. This can be useful for tightening the security of your Linux machines. |
|
|