Hey all,
Some people have requested that we move the default linux capability support to a module so that it can be replaced with other capability models.
There's a catch though -- now that the capability stuff is modularized, it needs to be loaded before some daemons can be used (eg, vsftpd). We can help by having the rc.d scripts load the module, but some people will use xinetd for these daemons, so they'll have to manually load the module from somewhere (rc.local would work).
This change will come with the 2.6.16 kernel, so please be aware.