https://forums.grsecurity.net/viewtopic.php?t=2522 https://forums.grsecurity.net/viewtopic.php?t=2522 Capabilities are really sort of a poorly thought out boun

https://forums.grsecurity.net/viewtopic.php?t=2522 https://forums.grsecurity.net/viewtopic.php?t=2522 Capabilities are really sort of a poorly thought out boundary. It's like, yes this is technically better than full root, but ultimately most individual capabilities are still extremely powerful/ can be leveraged for root. At the end of the day I highly recommend capabilities as a measure of last resort - it's a "may as well", not a goal.