LCTL-NODEMAP_SET_CAP(8)

NAME
lctl-nodemap_set_cap - set user capabilities

SYNOPSIS
lctl nodemap_set_cap --name NODEMAP --caps CAPABILITIES --type {mask|set|off}

DESCRIPTION
nodemap_set_cap defines capabilities for regular users on the specified NODEMAP, as described by CAPABILITIES. The CAPABILITIES are a mask if the type is mask or a 'set' if type is set.

OPTIONS

--name NODEMAP
    The name of the nodemap to define capabilities for.

--caps CAPABILITIES
    is the capabilities to apply.

--type {mask|set|off}
    is the desired type for capabilities: mask for a capability mask, set to set user capabilities to the specified value, off to disable capabilities filtering.

EXAMPLES
Define a capability mask as "cap_chown,cap_dac_read_search" on nodemap 'nm1':
    # lctl nodemap_set_cap --name nm1 --caps cap_chown,cap_dac_read_search --type mask

Add "cap_fowner" to the capability mask on nodemap 'nm1':
    # lctl nodemap_set_cap --name nm1 --caps +cap_fowner --type mask

Remove all capabilities users might have on nodemap 'nm1':
    # lctl nodemap_set_cap --name nm1 --caps 0 --type mask

Set capabilities to "cap_linux_immutable,cap_sys_resource" for regular users on nodemap 'nm2':
    # lctl nodemap_set_cap --name nm2 --caps cap_linux_immutable,cap_sys_resource --type set

Add "cap_fsetid" to the capabilities for regular users on nodemap 'nm2':
    # lctl nodemap_set_cap --name nm2 --caps +cap_fsetid --type set

Disable capabilities filtering for regular users on nodemap 'nm2':
    # lctl nodemap_set_cap --name nm2 --type off

AVAILABILITY
lctl nodemap_set_cap is part of the lustre(7) filesystem package since release 2.17.0

SEE ALSO
lustre(7), lctl-nodemap-activate(8), lctl-nodemap-add-idmap(8), lctl-nodemap-add-range(8), lctl-nodemap-del(8), lctl-nodemap-del-idmap(8), lctl-nodemap-del-range(8), lctl-nodemap-modify(8) lctl-nodemap-new(8),