# runapp needs CAP_SYS_ADMIN to set up the environment
# before spawning the actual application.
limba: setuid-binary usr/bin/runapp 4755 root/root
