David Howells <dhowells@redhat.com> wrote:> > I think this is a pretty strong argument. Counter-arguments, anybody?> > Yes. CAP_DAC_READ_SEARCH.No, it would seem unlikely it's that, but I guess there's another capabilityoverride because the process is owned by root.David