1*2810ac1bSKiyoung KimAllows a process to override of all Discretionary 2*2810ac1bSKiyoung KimAccess Control (DAC) access, including ACL execute 3*2810ac1bSKiyoung Kimaccess. That is read, write or execute files that the 4*2810ac1bSKiyoung Kimprocess would otherwise not have access to. This 5*2810ac1bSKiyoung Kimexcludes DAC access covered by CAP_LINUX_IMMUTABLE. 6