In Linux, a process that have a non-root user can have some capabilities assigned to it to increase its privileges.
And a process that have the root user have all of the capabilities available, but can such a process have some of its capabilities removed (either manually or automatically in certain situations)?