1Allows a process to freely manipulate its inheritable
2capabilities.  Linux supports the POSIX.1e Inheritable
3set, as well as Bounding and Ambient Linux extension
4vectors. This capability permits dropping bits from the
5Bounding vector. It also permits the process to raise
6Ambient vector bits that are both raised in the
7Permitted and Inheritable sets of the process. This
8capability cannot be used to raise Permitted bits, or
9Effective bits beyond those already present in the
10process' permitted set.
11
12[Historical note: prior to the advent of file
13capabilities (2008), this capability was suppressed by
14default, as its unsuppressed behavior was not
15auditable: it could asynchronously grant its own
16Permitted capabilities to and remove capabilities from
17other processes arbitraily. The former leads to
18undefined behavior, and the latter is better served by
19the kill system call.]
20