Martin - per your opinion I've disabled CONFIG_SECURITY_FILE_CAPABILITIES which removes CAP_SETPCAP from the initial capabilities mask.
Martin - per your opinion I've disabled CONFIG_ SECURITY_ FILE_CAPABILITI ES which removes CAP_SETPCAP from the initial capabilities mask.