For most things, you can do with capabilities Issue is that it increases friction and you need sudo anyways to set the capabilities. Most web servers would ha

For most things, you can do with capabilities Issue is that it increases friction and you need sudo anyways to set the capabilities. Most web servers would happy to run unprivileged with only CAP_NET_BIND_SERVICE