Listing 2. File Capabilities to Empower Partially Privileged Admins

/bin/kill:=ei
/bin/ls:=ei
/bin/cat:=ei
/bin/ls:=ei
/bin/mv:=ei
/bin/touch:=ei
/bin/mount:=ei
/bin/umount:=ei
/bin/vi:=ei
/bin/rm:=ei
/bin/chgrp:=ei
/bin/find:=ei
/bin/chmod:=ei
/bin/chown:=ei
/bin/mkdir:=ei
/usr/sbin/useradd:=ei
/usr/bin/passwd:=ei
/usr/sbin/setcap:cap_setfcap=ei
/bin/ping:cap_net_raw=ep
/bin/su:=ep

