Re: [PATCH 3/4] capability: Create a new capability CAP_SIGNED
On Fri, 15 Mar 2013, Casey Schaufler wrote:
> Capabilities aren't just random attribute bits. They > indicate that a task has permission to violate a > system policy (e.g. change the mode bits of a file > the user doesn't own).