Windows setcap equivalent in Linux
Gives a binary a specific kernel capability.
setcap
sudo setcap cap_net_bind_service=+ep /path/to/bin
sudo setcap cap_net_bind_service=+ep /path/to/bin
sudo setcap cap_net_bind_service=+ep /path/to/bin
Overview
What this command does
On Windows, "setcap" is used to grant file capability. On Linux, the closest practical mapping shown here is "sudo setcap cap_net_bind_service=+ep /path/to/bin". Gives a binary a specific kernel capability. This reference is grouped under Security & Permissions → Capabilities.
Windows → Linux context
What changes when you use this on Linux?
Equivalent task, different tool
Windows setcap maps to sudo setcap cap_net_bind_service=+ep /path/to/bin for this task. Treat this as a workflow mapping rather than a character-for-character syntax translation.
Portable across the compared distros
The Debian/Ubuntu, Fedora and Arch rows use the same command in this mapping. Package availability or defaults can still vary, so check the installed tool version when an option behaves differently.
Elevated privilege appears in this workflow
At least one example uses sudo. Confirm the target path, device, service or package before running the elevated form; do not add sudo simply to bypass an unexplained permission error.
For the broader concept behind this mapping, read Linux permissions for Windows users.
Practical tasks
Common use cases
Grant file capability
Gives a binary a specific kernel capability.
sudo setcap cap_net_bind_service=+ep /path/to/bin
Grant file capability
sudo --help
Show command help when supported
man sudo
Open the manual page when installed
Ready to run
Copyable Linux commands
Review paths, device names, package names and permissions before running any command.
sudo setcap cap_net_bind_service=+ep /path/to/bin
Walkthrough
Examples with explanations
# Windows equivalent: setcap
sudo setcap cap_net_bind_service=+ep /path/to/bin
Reference
Common options and variations
| Command or option | Use |
|---|---|
sudo setcap cap_net_bind_service=+ep /path/to/bin | Grant file capability |
sudo --help | Show command help when supported |
man sudo | Open the manual page when installed |
Distro differences
Debian/Ubuntu vs Fedora vs Arch
Debian/Ubuntu, Fedora and Arch all use "sudo setcap cap_net_bind_service=+ep /path/to/bin" for this mapping. The command syntax shown here is portable across the three rows, although installed versions and system defaults can still vary.
| Distribution | Package manager / base | Equivalent command | Difference to notice |
|---|---|---|---|
| Debian/Ubuntu | same command | sudo setcap cap_net_bind_service=+ep /path/to/bin |
Same command on this distribution. |
| Fedora | same command | sudo setcap cap_net_bind_service=+ep /path/to/bin |
Same command on this distribution. |
| Arch | same command | sudo setcap cap_net_bind_service=+ep /path/to/bin |
Same command on this distribution. |
Keep learning