Allows a process to perform network configuration operations: - interface configuration - administration of IP firewall, masquerading and accounting - setting debug options on sockets - modification of routing tables - setting arbitrary process, and process group ownership on sockets - binding to any address for transparent proxying (this is also allowed via CAP_NET_RAW) - setting TOS (Type of service) - setting promiscuous mode - clearing driver statistics - multicasing - read/write of device-specific registers - activation of ATM control sockets