As part of the self-sandboxing process, drop unneeded capabilities. Some time ago I created [capng](https://crates.io/crates/capng), a crate that wraps around `libcapng`, and I'd swear I added support to use it to drop capabilities in `vhost-user-fs`, but seems that I never created the PR. :-? --- https://gitlab.com/virtio-fs/virtiofsd-rs/-/issues/7
_______________________________________________ Virtio-fs mailing list [email protected] https://listman.redhat.com/mailman/listinfo/virtio-fs
