cap_isclear 461 include/linux/capability.h return cap_isclear(dest); cap_isclear 406 security/commoncap.c if (!cap_isclear(bprm->cap_post_exec_permitted))