CAPSUDO

Summary from the TLDR Dev newsletter

capsudo is an object-capability style sudo. It creates a socket that acts as an object capability, allowing anyone who can access the socket to make use of it. The capsudo daemon accepts connections, stitching everything together to run programs bound to object capabilities. Examples of how to use the tool are available in the repository.