case "${ACTION}" in
post)
setcap cap_sys_ptrace,cap_dac_read_search,cap_net_raw,cap_net_admin+ep usr/bin/bandwhich
;;
esac