The root user always receives a full capability set after executing a program, regardless of file capabilities.

无论文件能力如何设置，根用户在执行程序之后总是获得完整的能力集。

youdao

If a process switches its effective uid from 0 to non-0, then its effective capability set is cleared.

如果进程将它的有效uid从0切换到非 0，那么它的有效能力集被清空。

youdao

By specifying -c all=p, we asked for a fully populated permitted, or forced, capability set on /usr/bin/at.

通过指定 -c all=p，我们请求在 /usr/bin/at 上设置包含所有能力的允许能力集。

youdao

By specifying -c all=p, we asked for a fully populated permitted, or forced, capability set on /usr/bin/at.

通过指定 -c all=p，我们请求在 /usr/bin/at 上设置包含所有能力的允许能力集。

youdao