cadrop1
Capability ambient drop
Usage
cadrop [capability_list
[command
[args]]]
Overview
Cadrop allows users to drop (ambient) capabilities.
Cadrop launches the command indicated as a parameter ($SHELL if omitted) dropping all the capabilities listed in the capability_list.
If the capability_list is also omitted or it matches one of the string "all" or "-", cadrop drops all the capabilities.
Releases
Unchanged in 3 releases since Debian 11 (Bullseye).