setcap sets the capabilities of each specified
filename to the
capabilities specified. The
capabilities are specified in the form described in
The special filename, -,
can be used to indicate that capabilities are read from the standard
input. In such cases, the capability set is terminated with a blank
The option, -r, can be used to remove a capability set from a file.