CAP_SETPCAP
if (write && (!capable(CAP_SETPCAP) ||
if (!ns_capable(current_user_ns(), CAP_SETPCAP))
CAP_SETPCAP, CAP_OPT_NONE) != 0) {
CAP_SETPCAP, CAP_OPT_NONE) == 0)