1. Removes 'capabilities' in the kernel, making the system more secure Capabilities are a form of kernel-based access control. This program provides a user-friendlier way than setting proc/sys/kernel/cap-bound by hand to remove capabilities from your Linux kernel. For example, you can remove the capability to load kernel modules by executing 'lcap CAP_SYS_MODULE' as root. Then no one, not even root, can load modules into your kernel. This can be useful for tightening the security of your Linux machines. From Debian 3.0r0 APT