case "${ACTION}" in post) setcap cap_sys_ptrace,cap_dac_read_search,cap_net_raw,cap_net_admin+ep usr/bin/bandwhich ;; esac