community.general.capabilities module – Manage Linux capabilities
This module is part of the community.general collection (version 6.1.0).
You might already have this collection installed if you are using the
It is not included in
To check whether it is installed, run
ansible-galaxy collection list.
To install it, use:
ansible-galaxy collection install community.general.
To use it in a playbook, specify:
This module manipulates files privileges using the Linux capabilities(7) system.
Desired capability to set (with operator and flags, if state is
Specifies the path to the file to be managed.
Whether the entry should be present or absent in the file’s capabilities.
The capabilities system will automatically transform operators and flags into the effective set, so for example,
cap_foo=epwill probably become
This module does not attempt to determine the final operator and flags to compare, so you will want to ensure that your capabilities argument matches the final capabilities.
- name: Set cap_sys_chroot+ep on /foo community.general.capabilities: path: /foo capability: cap_sys_chroot+ep state: present - name: Remove cap_net_bind_service from /bar community.general.capabilities: path: /bar capability: cap_net_bind_service state: absent