Assertion: file capability | /r/CapableOf | grant that capability
Facets:
Source sentences:
text: If a thread drops a capability from its permitted set, it can never reacquire that capability (unless it execve(2)s either a set-user-ID-root program, or a program whose associated file capabilities grant that capability).