4 ms·

This interesting, I have never seen setcap. It seems it doesn't work with scripts (ruby, python) and if you are using JVM/mono/beam you will need to setcap the

• m45t3r 10y ago
  My two cents, you probably need to apply setcap in Python interpreter itself instead of the script. It shouldn't be a problem though, since you probably will use a virtualenv anyway. Another option would be to drop privileges at runtime.
  • poooogles 10y ago
    >It shouldn't be a problem though, since you probably will use a virtualenv anyway. virtualenvs don't create a new interpreter, they just fudge the python path? Definitely not recommended on interpreted languages (although we use it all the time on our go apps).
    • m45t3r 10y ago
      They create a copy of the binary of the interpreter, you can even call it directly instead of activating the virtualenv first.