/lib/security/pam_cap.so
/etc/security/capability.conf