singularity-capability - Manage Linux capabilities for users and groups
Contents
Description
Capabilities allow you to have fine grained control over the permissions that
your containers need to run.
NOTE: capability add/drop commands require root to run. Granting capabilities
to users allows them to escalate privilege inside the container and will
likely give them a route to privilege escalation on the host system as well.
Do not add capabilities to users who should not have root on the host system.
Example
All group commands have their own help output:
$ singularity help capability add
$ singularity capability add --help
History
27-Feb-2025 Auto generated by spf13/cobra
Auto generated by spf13/cobra Feb 2025 singularity(1)
Name
singularity-capability - Manage Linux capabilities for users and groups
Options
-h, --help[=false] help for capability
See Also
singularity(1), singularity-capability-add(1), singularity-capability-avail(1), singularity-capability-drop(1), singularity-capability-list(1)
Synopsis
singularitycapability
