The CAP_NET_ADMIN capability

• Allow interface configuration
• Allow administration of IP firewall, masquerading and accounting
• Allow setting debug option on sockets
• Allow modification of routing tables
• Allow setting arbitrary process / process group ownership on sockets
• Allow binding to any address for transparent proxying
• Allow setting TOS (type of service)
• Allow setting promiscuous mode
• Allow clearing driver statistics
• Allow multicasting
• Allow read/write of device-specific registers