capabilities

Hi, I have a scenario where a normal user process needs to call docker stats command, which is an elevated (root) call. The idea is to write a simple helper binary that adds the appropriate caps to the inheritable and ambient sets (and then set the caps on the binary from a setup script that...