CAP_SYS_BOOT 200 kernel/kexec.c if (!capable(CAP_SYS_BOOT) || kexec_load_disabled) CAP_SYS_BOOT 378 kernel/kexec_file.c if (!capable(CAP_SYS_BOOT) || kexec_load_disabled) CAP_SYS_BOOT 318 kernel/reboot.c if (!ns_capable(pid_ns->user_ns, CAP_SYS_BOOT))