I'm having a rather frustrating time getting dhclient to run from a normal user using setcap. Because of the environment I am working with, adding to sudoers is not an option.My attempt:sudo setcap 'CAP_NET_BIND_SERVICE,CAP_NET_RAW=+ep' /sbin/dhclientI then confirmed with getcap the the capabilities were in fact set properly. But when I run I get an Operation not permitted. I then ran it under strace and that shows several socket(PF_NETLINK, SOCK_RAW, 0)         = 4 among other syscalls and ends with socket(PF_PACKET, SOCK_RAW, 768)        = -1 EPERM (Operation not permitted) Everything I read on PF_PACKET says it should just need cap_net_raw.Linux 3.16.0-77-generic #99~14.04.1-Ubuntu SMP Tue Jun 28 19:17:10 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
setcap on dhclient appears to have no effect
linux;dhcp;capabilities