apply capabilitites to Outline executable

client/electron/debian/after_install.sh

@@ -14,4 +14,14 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# Dependencies:
+#   - libcap2-bin: setcap
+
 set -eux
+
+readonly PREFIX=/opt/Outline
+
+# Grant specific capabilities so Outline can run without root permisssion
+#   - cap_net_admin: configure network interfaces, set up routing tables, etc.
+#   - cap_dac_override: modify network configuration files owned by root
+/usr/sbin/setcap cap_net_admin,cap_dac_override+eip ${PREFIX}/Outline

client/electron/electron-builder.json

@@ -18,8 +18,11 @@
   ],
 
   "deb": {
-    "afterInstall": "client/electron/debian/after_install.sh",
-    "afterRemove": "client/electron/debian/after_remove.sh"
+    "depends": [
+      "gconf2", "gconf-service", "libnotify4", "libappindicator1", "libxtst6", "libnss3",
+      "libcap2-bin"
+    ],
+    "afterInstall": "client/electron/debian/after_install.sh"
   },
   "linux": {
     "category": "Network",