On Wed, 16 Aug 2023 at 19:50, Jeff Moyer <jmoyer@xxxxxxxxxx> wrote: > Matteo, you didn't reply to Jens' message about pulling the patch, so > I figured you got busy, so I picked up the patch. I hope you're okay > with the signoff. Hi, yeah sorry I was on vacation until today so I didn't see the thread. Thanks for picking this up! I would agree with Gabriel that option 1 should also allow processes which have CAP_SYS_ADMIN. -- Matteo