The Role of Capabilities

Filter kernel privileges by dropping unnecessary root powers like raw socket access.