lcap: lcap (remove 'capabilities' in the kernel, making the system more secure)
lcap:
lcap: Capabilities are a form of kernel-based access control. This program
lcap: provides a user-friendlier way than setting /proc/sys/kernel/cap-bound
lcap: by hand to remove capabilities from your Linux kernel.
lcap:
lcap: For example, you can remove the capability to load kernel modules by
lcap: executing 'lcap CAP_SYS_MODULE' as root. Then no one, not even root,
lcap: can load modules into your kernel. This can be useful for tightening
lcap: the security of your Linux machines.
lcap: