CAP_SETFCAP
ns->parent_could_setfcap = cap_raised(new->cap_effective, CAP_SETFCAP);
if (!file_ns_capable(file, map_ns->parent, CAP_SETFCAP))
if (!capable_wrt_inode_uidgid(idmap, inode, CAP_SETFCAP))
if (!capable_wrt_inode_uidgid(idmap, inode, CAP_SETFCAP))
if (ns_capable(inode->i_sb->s_user_ns, CAP_SETFCAP))