RemoveSETUID feature

[Jason L Tibbitts III]

Yeah, it looks like the capabilities thing has broken my buildsystem:

Error unpacking rpm package iputils-20101006-2.fc15.x86_64
error: unpacking of archive failed on file /bin/ping: cpio: cap_set_file
  failed - Operation not supported

Error unpacking rpm package policycoreutils-2.0.83-32.fc15.x86_64
error: unpacking of archive failed on file /usr/sbin/seunshare: cpio:
  cap_set_file failed - Operation not supported

I don't use the mock tmpfs plugin; I just have a big tmpfs mounted on
/mock that everything is built in.

> grep mock /proc/mounts
tmpfs /mock tmpfs rw,rootcontext=unconfined_u:object_r:default_t:s0,seclabel,relatime,size=10485760k,nr_inodes=1048576,mode=2775,gid=219 0 0

I'm thinking that tmpfs simply doesn't support capabilities, which would
be... unfortunate.

 - J<