Yaron Sheffer wrote: > it's somewhat cleaner to have all the security-critical settings in > one place: owner, group, permissions, capabilities (and grep for "-P" > or "--capabilities"...). Plus you can rely on "install" to always be > there, which I don't think is true for "setcap".
Thanks for the patch. However, since that's the only benefit I see (setcap may not be installed), I'm 60:40 against. If you find some other install program with this feature, that would strengthen the case for adding the option here.