# Install from source and run as non-root

**URL:** https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430
**Category:** Beats
**Created:** [July 28, 2015, 4:08pm UTC](https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430 "2015-07-28T16:08:31Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![graham](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/graham/32/3933_2.png) [@graham](https://discuss.elastic.co/u/graham)
#### Post date: [July 30, 2015, 7:59pm UTC](https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430/3 "2015-07-30T19:59:07Z")

</div>

You should be able to do this by giving the packetbeat binary `CAP_NET_RAW` [capability](http://man7.org/linux/man-pages/man7/capabilities.7.html).

```
$ sudo setcap cap_net_raw=ep /usr/bin/packetbeat

```

After that you can start packetbeat as any user. This will not work in a `nosuid` mount (e.g. Ubuntu home directory), but `/usr/bin` should be fine. I'm pretty sure `systemd` can set process capabilities too, and that might be the most acceptable solution for your sysadmins.

It doesn't matter under which account Apache, ES or Redis are running. Packetbeat sees all the network packets on the machine it runs on.

---

_[View the full topic](https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430)._