SELinux is preventing /usr/sbin/setfiles from 'mac_admin' accesses on the capability2 .