setcap

set file capabilities

setcap [-q] [-v] [capabilities|-|-r] filename [capabilitiesN fileN ]

sets the capabilities of file

'-'capabilities are read from standard input.

The capability set is terminated with a blank line.

-v verify that the capabilities are associated with the file
specified in the form in cap_from_text(3).
-r remove a capability set from a file.
-q quiet
Comma-separated capability names (or all), followed by an action-list.
action-list sequence of operator flag pairs.
operators =, +, and -.
flags e, i and p. effective, inheritable and permitted sets

Examples:
sudo setcap 'cap_net_raw,cap_net_admin+eip' `which hcitool`

sudo setcap cap_net_raw,cap_net_admin+eip $(eval readlink -f `which node`)

sudo systemctl restart nodered

See

cap_set_file(3), getcap(8)