Reducing CAP_SYS_ADMIN

Posted Mar 4, 2020 14:20 UTC (Wed) by mathstuf (subscriber, #69389)
In reply to: Reducing CAP_SYS_ADMIN by Wol
Parent article: CAP_PERFMON — and new capabilities in general

Won't that break containers running older distros on newer kernels? Would we need capability namespaces then?