add linux capabilities