I'm trying to start BoringTun with
setcap in order for it to run unprivileged but still have the ability to
root@67672793823c:/# setcap cap_net_admin+epi /usr/local/sbin/boringtun --foreground wgnet0 fatal error: Invalid argument usage: setcap [-q] [-v] (-r|-|<caps>) <filename> [ ... (-r|-|<capsN>) <filenameN> ] Note <filename> must be a regular (non-symlink) file.
The man page doesn't seem very helpful and I can't find an option which will allow me to execute a binary with arbitrary arguments.
If I remove the arguments, everything works, but I need to pass these arguments.