1*2810ac1bSKiyoung KimAllows a process to perform network configuration 2*2810ac1bSKiyoung Kimoperations: 3*2810ac1bSKiyoung Kim - interface configuration 4*2810ac1bSKiyoung Kim - administration of IP firewall, masquerading and 5*2810ac1bSKiyoung Kim accounting 6*2810ac1bSKiyoung Kim - setting debug options on sockets 7*2810ac1bSKiyoung Kim - modification of routing tables 8*2810ac1bSKiyoung Kim - setting arbitrary process, and process group 9*2810ac1bSKiyoung Kim ownership on sockets 10*2810ac1bSKiyoung Kim - binding to any address for transparent proxying 11*2810ac1bSKiyoung Kim (this is also allowed via CAP_NET_RAW) 12*2810ac1bSKiyoung Kim - setting TOS (Type of service) 13*2810ac1bSKiyoung Kim - setting promiscuous mode 14*2810ac1bSKiyoung Kim - clearing driver statistics 15*2810ac1bSKiyoung Kim - multicasing 16*2810ac1bSKiyoung Kim - read/write of device-specific registers 17*2810ac1bSKiyoung Kim - activation of ATM control sockets 18