> When a process enters capsicum mode, Can it be forced to? > it loses all permissions normally associated with its controlling user, with the exception of "c

> When a process enters capsicum mode, Can it be forced to? > it loses all permissions normally associated with its controlling user, with the exception of "capabilities" it already has in the form of file descriptors. What if we want to grant an app already running a new capability on the fly? E.g. I imagine a case of user opening a file in a GUI app as an OS-level file selection dialog getting invoked (provided the app already has a capability to invoke it, as by the manifest) and producing a capability for the app to access the file the user choosse in an explicitly specified (RO or R/W) mode.