hello,
I am not understand how does capability work, I have tried use
dac_override what be explained override any dac constrain, but when I
try to use some root privileges such as: ls /root, it still be negatived by priority problem.
and which situation use profile transition.
how to use these attribute? help me, thank you.
dac_override is intended to be used to check running process capabilities to identify those processes that are being given more capabilities than are generally considered safe. In general, running as root or with root privileges is a bad thing but some programmers take a lazy approach and just try to override security and privileges.
to list root, you can [su ls /root] in a terminal and supply the root password when asked.