diff --git a/RTCP/Cobalt/GPUProc/src/scripts/Cobalt_install.sh b/RTCP/Cobalt/GPUProc/src/scripts/Cobalt_install.sh
index 3d246001f8ec27363f0599e18b7825fd0499aa8c..8c76ec8818b3a80a4a7072bcda8f70d10212a359 100755
--- a/RTCP/Cobalt/GPUProc/src/scripts/Cobalt_install.sh
+++ b/RTCP/Cobalt/GPUProc/src/scripts/Cobalt_install.sh
@@ -45,14 +45,14 @@ for HOST in ${HOSTS:-cbm001 cbm002 cbm003 cbm004 cbm005 cbm006 cbm007 cbm008 cbm
     ln -sfT /localhome/lofarsystem/lofar/var var
 
   # Set capabilities so our soft real-time programs can elevate prios.
+  # Requires Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt to be in place.
   #
-  # cap_sys_nice: allow real-time priority for threads
-  # cap_ipc_lock: allow app to lock in memory (prevent swap)
-  # cap_net_raw:  allow binding sockets to NICs
-  OUTPUTPROC_CAPABILITIES='cap_sys_nice,cap_ipc_lock'
-  sudo /sbin/setcap \"${OUTPUTPROC_CAPABILITIES}\"=ep bin/outputProc || true
-  RTCP_CAPABILITIES='cap_net_raw,cap_sys_nice,cap_ipc_lock'
-  sudo /sbin/setcap \"${RTCP_CAPABILITIES}\"=ep bin/rtcp || true
+  # cap_net_raw:  allow binding sockets to NICs (in addition to IPs)
+  # cap_sys_nice: allow process to increase priority (but not to real-time class)
+  # cap_ipc_lock: allow process to lock in memory (prevent swap)
+  sudo /sbin/setcap cap_net_raw,cap_sys_nice,cap_ipc_lock=ep bin/rtcp || true
+  sudo /sbin/setcap cap_net_raw,cap_sys_nice,cap_ipc_lock=ep bin/outputProc || true
+  sudo /sbin/setcap cap_net_raw,cap_sys_nice,cap_ipc_lock=ep bin/TBB_Writer || true
   " || exit 1
 done