How to add a command or binary to CageFS for all users using addrpm

Introduction

In some circumstances, you may need to extend the functionality of your shell users on a server using CageFS. This article will demonstrate how to enable a command provided by an RPM package to all CageFS users.

Procedure

1. Login to the server as the root user via SSH or Terminal
2. Use the cagefs command with the --addrpm option to add the desired RPM package.
   

   cagefsctl --addrpm nmap

   The --delrpm option can be used to remove RPMs that you have added in this manner.

   cagefsctl --delrpm nmap

   In this example, we are adding the nmap utility to CageFS for demonstration purposes. Be sure you only expose tools that your users require and that you understand the potential consequences of use.
3. Update the cage with the new package by using the following command:
   

   /usr/sbin/cagefsctl --force-update