You cannot change system time even though you are not using APPARMOR or SECCOMP. There is something called ‘‘linux capabilities’’ to make granular group to execute ‘‘privileged action’’.

getcap /usr/bin/ping
ps -ef | grep sshd

getcap <process-id-of-sshd>