Capabilities

Capabilities split the power of the root user into pieces that can be dropped individually.

Capabilities are one of the Linux isolation primitives, alongside the namespace, the cgroup, and seccomp. Capabilities divide the power of the root user into pieces, and each piece can be dropped individually.