I wasn't aware of the original, more useful meaning of "capabilities". Linux really has spread the "posix capabilities" meaning most widely. But I was aware th

I wasn't aware of the original, more useful meaning of "capabilities". Linux really has spread the "posix capabilities" meaning most widely. But I was aware that most linux capabilities can pretty easily get you full root: http://forums.grsecurity.net/viewtopic.php?f=7&t=2522 http://forums.grsecurity.net/viewtopic.php?f=7&t=2522 (I'm really not a fan of linux/posix capabilities, they should probably just be forgotten.) There's also this thing that's primarily on FreeBSD called "capsicum" which is also a "capabilities" model which I've heard is more secure/useful but really don't know anything about. Lots of relevant links: https://www.lightbluetouchpaper.org/2013/12/20/2013-capsicum-year-in-review/ https://www.lightbluetouchpaper.org/2013/12/20/2013-capsicum...