Capabilities allow the evaluation of some important system privileges in a separate thread different from the current process. This way, you don't need to run a program as root for it to access certain parts of the system. MUO – Feed