.nh .TH "singularity" "1" "Feb 2022" "Auto generated by spf13/cobra" "" .SH NAME .PP singularity-capability - Manage Linux capabilities for users and groups .SH SYNOPSIS .PP \fBsingularity capability\fP .SH DESCRIPTION .PP Capabilities allow you to have fine grained control over the permissions that your containers need to run. .PP NOTE: capability add/drop commands require root to run. Granting capabilities to users allows them to escalate privilege inside the container and will likely give them a route to privilege escalation on the host system as well. Do not add capabilities to users who should not have root on the host system. .SH OPTIONS .PP \fB-h\fP, \fB--help\fP[=false] help for capability .SH EXAMPLE .PP .RS .nf All group commands have their own help output: $ singularity help capability add $ singularity capability add --help .fi .RE .SH SEE ALSO .PP \fBsingularity(1)\fP, \fBsingularity-capability-add(1)\fP, \fBsingularity-capability-avail(1)\fP, \fBsingularity-capability-drop(1)\fP, \fBsingularity-capability-list(1)\fP .SH HISTORY .PP 20-Feb-2022 Auto generated by spf13/cobra