Set file capabilities, can execute commands via cap-enabled binaries.
setcap cap_setuid+ep /path/to/binarysetcap cap_setuid+ep /path/to/binarySandbox: execFile · Timeout: 30s
security.execution.command Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 2 MB |
| Network | none |
| Disk I/O | low |
Execute command via setcap-enabled binary
setcap cap_setuid+ep /path/to/binary