capabilities
Root's rights split by the kernel into parts: CAP_NET_BIND_SERVICE for a port below 1024, CAP_DAC_OVERRIDE to bypass file permissions. A process or a file (setcap) gets only the part it needs instead of all of root.
Root's rights split by the kernel into parts: CAP_NET_BIND_SERVICE for a port below 1024, CAP_DAC_OVERRIDE to bypass file permissions. A process or a file (setcap) gets only the part it needs instead of all of root.