Nick Kralevich pointed out that it was rather problematic to check capabilities when reading some pstore files. Instead, opt for a more configurable DAC approach, but retain the general protection by making the pstorefs root directory mode 0750. It was 0755, but most crash-handlers will also be performing unlink operations (which DAC would require a root uid perm for already), so this shouldn't affect anyone, but rather make permissions more flexible.
-Kees
