What linux calls capabilities is a misnomer that isn't particularly effective - it's sort of splitting root up into smaller pieces. This is totally different f

What linux calls capabilities is a misnomer that isn't particularly effective - it's sort of splitting root up into smaller pieces. This is totally different from the actual capabilities security model, which is closer to a "if you can name a resource you can access that resource". So, for example, imagine every file on your system has a path with a uuid, and there is no "ls" - you'd only be able to access files whose names had been told to you/ that you created yourself. That's a capabilities model, and Linux does not have that.