# CentOS 7 capabilities(7) list

policycoreutils-newrole         /usr/bin/newrole                = cap_chown,cap_dac_override,cap_dac_read_search,cap_fowner,cap_setpcap,cap_sys_admin,cap_audit_write+ep
policycoreutils-sandbox         /usr/sbin/seunshare             = cap_dac_override,cap_fowner,cap_setuid,cap_setpcap,cap_sys_admin,cap_sys_nice+ep
wireshark                       /usr/sbin/dumpcap               = cap_net_admin,cap_net_raw+ep
fping                           /usr/sbin/fping                 = cap_net_raw+ep
fping                           /usr/sbin/fping6                = cap_net_raw+ep
glibc-common                    /usr/libexec/pt_chown           = cap_chown,cap_fowner+ep
gnome-keyring                   /usr/bin/gnome-keyring-daemon   = cap_ipc_lock+ep
iputils-ninfod                  /usr/sbin/ninfod                = cap_net_raw+ep
iputils                         /usr/bin/ping                   = cap_net_admin,cap_net_raw+p
iputils                         /usr/bin/ping6                  = cap_net_admin,cap_net_raw+p
iputils                         /usr/sbin/arping                = cap_net_raw+p
iputils                         /usr/sbin/clockdiff             = cap_net_raw+p
mate-keyring                    /usr/bin/mate-keyring-daemon    = cap_ipc_lock+ep
mtr                             /usr/sbin/mtr                   = cap_net_raw+ep
rsh                             /usr/bin/rcp                    = cap_net_bind_service+ep
rsh                             /usr/bin/rlogin                 = cap_net_bind_service+ep
rsh                             /usr/bin/rsh                    = cap_net_bind_service+ep
systemd                         /usr/bin/systemd-detect-virt    = cap_dac_override,cap_sys_ptrace+ep
httpd                           /usr/sbin/suexec                = cap_setgid,cap_setuid+ep
systemd-container               /usr/bin/systemd-detect-virt    = cap_dac_override,cap_sys_ptrace+ep
