case "${ACTION}" in
post)
setcap cap_net_bind_service+ep usr/bin/ss-local
setcap cap_net_bind_service+ep usr/bin/ss-server
setcap cap_net_bind_service+ep usr/bin/ss-tunnel
setcap cap_net_bind_service,cap_net_admin+ep usr/bin/ss-redir
;;
esac