Project: mesos
Issue MESOS-5050: Design Linux capability support for Mesos containerizer
We should at least support the following cases: 1) A root user has reduced capability 2) A non-root user has the capability of CAP_NET_ADMIN (to do e.g., tcpdump)
Story points: 5