This patch implements user based capabilities. With this module, you will be able to grant capabilities based on user-/groupid (root by default). This patch uses sysfs/kobject for the user interface. For example you can create a group raw and change the capability net_raw to this group: # chgrp raw /sys/usercaps/net_raw # chmod ug+x /sys/usercaps/net_raw # chgrp raw /sbin/ping # chmod u-s /sbin/ping; chmod g+s /sbin/ping or you can give a group of users some capability: # chgrp wheel /sys/usercaps/sys_admin # chmod ug+x /sys/usercaps/sys_admin Known bugs: - show()/store() not implemented - only minimally tested against 2.6.9 Regards, Olaf.