vegard, Good comment describing how various CAP_* are de facto equivalent to root: https://lwn.net/Articles/971891/
This is not news, of course, but it's interesting to see it spelled out. Are there other pages/lists like this? Maybe even a cap-to-root script/program..?