. "$BST_LIB" require pscap libcap-ng/present # pscap -a enumerates all processes (including pid 1) and prints, for every # process that holds capabilities, a row beneath a "...capabilities" header # (the header is emitted lazily, only once at least one capable process is seen). # Under the root browser runtime pid 1 carries the full set, so pscap -a both # runs clean and lists at least that process. check libcap-ng/pscap-runs pscap -a check_out libcap-ng/pscap-caps "capabilities" pscap -a # captest reports the running process's own uid/gid credentials and capability # set; the "credentials uid:" line is emitted unconditionally. check_out libcap-ng/captest "credentials uid:" captest