-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This patch looks good to me. acked. If you run newrole as root and it drops capabilities, the next shell script does not have any capabilities and can not function. newrole -L TopSecret Would end up with a root shell and no capabilities. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/JEIgACgkQrlYvE4MpobPH9ACfUrUOvNr3QavxkJrGHxPlf6fC wh0An2y3xa3Ns71EtaaiiU9BUC0X9bEY =Davq -----END PGP SIGNATURE-----