Suppose you want to allow an unprivileged process to change the owner of a file. You can add the cap_chown capability to the ULP.txt file:
When a process requests a capability, the Linux kernel checks the ULP.txt file to determine if the capability is allowed for unprivileged processes. If the capability is listed in the file, the kernel grants it to the process. If not, the kernel denies the request. ULP.txt
sudo nano /etc/security/ULP.txt Add the following line: Suppose you want to allow an unprivileged process