Capabilities essentially divide the power of the root user into separate privileges, which improves security by limiting the access an attacker would gain by exploiting or abusing a service.

Source: LXer – How to Manage Linux File Capabilities