cap_get_mode - Linux


cap_get_mode fetches a capability mode for a given capability.


cap_get_mode CAPABILITY
  • CAPABILITY: The name of the capability, e.g., "CAP_SYS_ADMIN".




# Get the current effective mode for CAP_SYS_ADMIN
cap_get_mode CAP_SYS_ADMIN

# Get the current inheritable mode for CAP_SETUID
cap_get_mode -i CAP_SETUID

Common Issues

  • Permission Denied: If the user does not have permission to access the capability information, it will receive "Permission denied" error. Ensure proper privileges.
  • Invalid Capability: If the provided capability is not valid, an "Invalid argument" error occurs. Check that the capability is correctly specified.


cap_get_mode integrates well with other capability management commands:

  • cap_set_mode: Sets the mode of a capability.
  • cap_set_proc: Sets the capabilities for a particular process or thread.
  • getcap: Gets the capabilities of a file or a process.

Related Commands

  • cap_set_mode
  • cap_set_proc
  • getcap