Assertion: container | /r/CapableOf | add new access control checks
Facets:
value: to every system call
type: TRANSITIVE-OBJECT
Source sentences:
text: The container adds its ID to every process and adding new access control checks to every system call.