On Monday, May 30th, 2022 at 09:09, Christian König <christian.koenig@xxxxxxx> wrote: > I find a separate directory rather unusual, but can't come up with any > better idea either. > > IIRC the security module had a mask file with names for the supported > capabilities. Are you referring to /sys/kernel/security/lsm? This sounds more painful to parse from user-space. Instead of a simple stat(), user-space would need to read the file, split on commas, and compare strings.