Finish https://sites.google.com/site/fullycapable/su-without-root Things still needed: - fix su[cap] to not generate bash errors (see https://bugzilla.kernel.org/show_bug.cgi?id=215926 for a related issue) - write something about minimal capabilities for the su binary.
contrib/sucap/su fixes: https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=fc437fd8308b4ee4d8e3053d51471883946f9b04 I'll keep this bug open until I update the article.
Documented article updated. Now that the article refers to the git clone at HEAD I didn't bother waiting for a release to complete it.