Reputation: 1129
In Linux, a process that have a non-root user can have some capabilities assigned to it to increase its privileges.
And a process that have the root user have all of the capabilities available, but can such a process have some of its capabilities removed (either manually or automatically in certain situations)?
Upvotes: 2
Views: 174
Reputation: 3714
I don't think so, because root is allowed to access everything - per os design.
That's the reason why modern Linux distributions often hides the root user and work with the sudo approach instead.
Upvotes: 1