You are reading an unmaintained version of the Ansible documentation. Unmaintained Ansible versions can contain unfixed security vulnerabilities (CVE). Please upgrade to a maintained version. See the latest Ansible documentation.

capabilities - Manage Linux capabilities¶

New in version 1.6.

Synopsis
Options
Examples
Notes
- Status

Synopsis ¶

This module manipulates files privileges using the Linux capabilities(7) system.

Options ¶

parameter	required	default	choices	comments
capability	yes			Desired capability to set (with operator and flags, if state is `present`) or remove (if state is `absent`) aliases: cap
path	yes			Specifies the path to the file to be managed.
state	no	present	present absent	Whether the entry should be present or absent in the file's capabilities.

Examples ¶

# Set cap_sys_chroot+ep on /foo
- capabilities:
    path: /foo
    capability: cap_sys_chroot+ep
    state: present

# Remove cap_net_bind_service from /bar
- capabilities:
    path: /bar
    capability: cap_net_bind_service
    state: absent

Notes ¶

Note

The capabilities system will automatically transform operators and flags into the effective set, so (for example, cap_foo=ep will probably become cap_foo+ep). This module does not attempt to determine the final operator and flags to compare, so you will want to ensure that your capabilities argument matches the final capabilities.

Status ¶

This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.

For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.