Cap bounding set problems
  No fine-grained control
  No way to get capabilities back selectively
  Unreversable
  Must reboot to make changes
  Assuming CAP_SYS_BOOT still available...

Copyright 2003, Bri Hatch of Onsight, Inc.

Presented at ISSA Puget Sound, 2003.

Presentation created using vim and MagicPoint.