David Howells <dhowells at redhat.com> wrote: > > I think this is a pretty strong argument. Counter-arguments, anybody? > > Yes. CAP_DAC_READ_SEARCH. No, it would seem unlikely it's that, but I guess there's another capability override because the process is owned by root. David