Assertion: file capability | /r/HasProperty | compiled into the kernel
Facets:
Source sentences:
text: Removing capabilities from the bounding set is only supported if file capabilities are compiled into the kernel.
text: When file capabilities are compiled into the kernel, the init process (the ancestor of all processes) begins with a full bounding set.