Use Linux file capabilities to control privilege rather than set*id (this is orthogonal to USE=caps which uses capabilities at runtime e.g. libcap)
Package | “filecaps” Flag Description |
---|---|
x11-misc/i3status | Linux capabilities library is required for i3status to be able to read net bandwidth |
net-libs/liboping | Allow non-root users to use [n]oping utility. |
app-metrics/collectd | When set collectd daemon will have set required capabilities to run most plugins even if run as unprivileged user |