Linux Capabilities: Drop Root Without Breaking Everything
Running everything as root because it's easier is the sysadmin equivalent of giving your web server the keys to reboot the host just because it needs port 80. Linux capabilities let you split root into 40+ granular permissions — here's how to use them without losing your mind.