some programs don't work in :unprivileged image

[jkrafczyk]

• ping: ping: permission denied (are you root?)
• tcpdump: tcpdump: eth0: You don't have permission to capture on that device
• traceroute: traceroute: socket(AF_INET,3,1): Operation not permitted

Can we have those running with suid root in a container?
Alternatively, can we use capabilities (setcap) to fix that?