Linux capabilities let you run programs with only the privileges they truly need, no full root access, no risky set-UID binaries. Creating a capabilities-only environment enforces least privilege, reduces attack surfaces, and makes privileged operations far safer. #linux #software#sofmputerscience #programming