kernel: don't require CAP_SEEK for a simple read/write operation