给文件赋予能力，下面以date为例
[bp@bogon ~]$ whereis -b date //如果去掉-b会显示额外的其他路径
date: /usr/bin/date
[bp@bogon ~]$ cp /usr/bin/date . //复制date命令到当前文件夹
[bp@bogon ~]$ ls
date Desktop Documents Downloads Music Pictures Public Templates Videos
[bp@bogon ~]$ ./date //查看时间正常
Thu Jun 7 13:24:32 PDT 2018
[bp@bogon ~]$ ./date -s "2018-06-07 13:29" //无法设置时间
./date: cannot set date: Operation not permitted
Thu Jun 7 13:29:00 PDT 2018
[bp@bogon ~]$ setcap "cap_sys_time=pe" ./date //给它赋予能力，但需要sudo才可以正常赋予能力，p指许可值，e值有效值
unable to set CAP_SETFCAP effective capability: Operation not permitted
[bp@bogon ~]$ sudo setcap "cap_sys_time=pe" ./date
[bp@bogon ~]$ ./date -s "2018-06-07 13:31"
Thu Jun 7 13:31:00 PDT 2018
[bp@bogon ~]$
[bp@bogon ~]$ getcap ./date
./date = cap_sys_time+ep