As miniupnpd is running as root, libcap(-ng) can be used to limit its capabilities. libcap-ng is very small, so this isn't a problem. Signed-off-by: Rosen Penev <rosenp@gmail.com>