How do I add a command or binary to CageFS for all users?

Question

How do I add a command or binary to CageFS for all users?

Answer

This can be done with the --addrpm flag with the cagefsctl command.

1. Login to the server as the root user via SSH or Terminal.

2. Use the cagefs command with the --addrpm option to add the desired RPM package.

   # cagefsctl --addrpm nmap

   Warning: In this example, we are adding the nmap utility to CageFS for demonstration purposes. Be sure you only expose tools that your users require and that you understand the potential consequences of use.

3. Update the cage with the new package by using the following command:

   # /usr/sbin/cagefsctl --force-update