My question is openned to other propositions too.
An install sequence puts a binary in the directories (say bin1 in PATH_TO_BIN1).
It configures a service in /etc/init.d
The service has to be started by another user than root (say user1).
How to set the rights properly to let user1 start the service which is supposed to run bin1?
My first approch was with Capabilities... but I'm really watching outside to see if I havn't missed something big.
setcap cap_net_bind_service+ep $PATH_TO_BIN1/bin1