#capabilities

Linux Capabilities: Fine-Grained Privileges Beyond root and setuid

How Linux capabilities split root's monolithic power into dozens of independent privileges, and why that's a meaningfully better security model than the traditional all-or-nothing setuid-root pattern.