← All commands
Topic hub Security & Permissions
Windows Linux Security & Permissions Command guide Capabilities

Windows setcap equivalent in Linux

Gives a binary a specific kernel capability.

Windows setcap
→
Linux equivalents
Debian/Ubuntu same command
sudo setcap cap_net_bind_service=+ep /path/to/bin
Fedora same command
sudo setcap cap_net_bind_service=+ep /path/to/bin
Arch same command
sudo setcap cap_net_bind_service=+ep /path/to/bin

Overview

What this command does

On Windows, "setcap" is used to grant file capability. On Linux, the closest practical mapping shown here is "sudo setcap cap_net_bind_service=+ep /path/to/bin". Gives a binary a specific kernel capability. This reference is grouped under Security & Permissions → Capabilities.

Migration tip: For the Windows task "setcap", the Linux workflow on this page uses "sudo setcap cap_net_bind_service=+ep /path/to/bin" across Debian/Ubuntu, Fedora and Arch. Check paths, permissions and installed package versions before copying it into a script.

Windows → Linux context

What changes when you use this on Linux?

Equivalent task, different tool

Windows setcap maps to sudo setcap cap_net_bind_service=+ep /path/to/bin for this task. Treat this as a workflow mapping rather than a character-for-character syntax translation.

Portable across the compared distros

The Debian/Ubuntu, Fedora and Arch rows use the same command in this mapping. Package availability or defaults can still vary, so check the installed tool version when an option behaves differently.

Elevated privilege appears in this workflow

At least one example uses sudo. Confirm the target path, device, service or package before running the elevated form; do not add sudo simply to bypass an unexplained permission error.

Practical tasks

Common use cases

Grant file capability

Gives a binary a specific kernel capability.

sudo setcap cap_net_bind_service=+ep /path/to/bin

Grant file capability

sudo --help

Show command help when supported

man sudo

Open the manual page when installed

Ready to run

Copyable Linux commands

Review paths, device names, package names and permissions before running any command.

sudo setcap cap_net_bind_service=+ep /path/to/bin

Walkthrough

Examples with explanations

# Windows equivalent: setcap
sudo setcap cap_net_bind_service=+ep /path/to/bin

Reference

Common options and variations

Command or optionUse
sudo setcap cap_net_bind_service=+ep /path/to/binGrant file capability
sudo --helpShow command help when supported
man sudoOpen the manual page when installed

Distro differences

Debian/Ubuntu vs Fedora vs Arch

Debian/Ubuntu, Fedora and Arch all use "sudo setcap cap_net_bind_service=+ep /path/to/bin" for this mapping. The command syntax shown here is portable across the three rows, although installed versions and system defaults can still vary.

DistributionPackage manager / baseEquivalent commandDifference to notice
Debian/Ubuntu same command sudo setcap cap_net_bind_service=+ep /path/to/bin Same command on this distribution.
Fedora same command sudo setcap cap_net_bind_service=+ep /path/to/bin Same command on this distribution.
Arch same command sudo setcap cap_net_bind_service=+ep /path/to/bin Same command on this distribution.

Keep learning

Related Security & Permissions commands