Change the behavior

Make security.capability implicitly fall back to
security.nscapability for callers not in init_user_ns.

respect security.capability first (if security.nscapability
is also set)

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
3 files changed