apptainer(1) apptainer(1) NAME apptainer-capability - Manage Linux capabilities for users and groups SYNOPSIS apptainer capability DESCRIPTION Capabilities allow you to have fine grained control over the permissions that your containers need to run. NOTE: capability add/drop commands require root to run. Granting capabilities to users allows them to escalate privilege inside the container and will likely give them a route to privilege escalation on the host system as well. Do not add capabilities to users who should not have root on the host system. OPTIONS -h, --help[=false] help for capability EXAMPLE All group commands have their own help output: $ apptainer help capability add $ apptainer capability add --help SEE ALSO apptainer(1), apptainer-capability-add(1), apptainer-capability- avail(1), apptainer-capability-drop(1), apptainer-capability-list(1) HISTORY 1-Apr-2024 Auto generated by spf13/cobra Auto generated by spf13/cobra Apr 2024 apptainer(1)