Allowing a non-root user to launch a specific binary that binds to a low port
Use this command…
setcap ''cap_net_bind_service=+ep'' /opt/grafana/bin/grafana-server
…to allow a non-root user to launch a specific binary that binds to a low port. After this setcap command, a non-root user can launch grafana-server even though it is configured to listen on port 80.