Index: branches/fc15-dev/server/fedora/config/etc/cron.d/check-filecaps
===================================================================
--- branches/fc15-dev/server/fedora/config/etc/cron.d/check-filecaps	(revision 1956)
+++ branches/fc15-dev/server/fedora/config/etc/cron.d/check-filecaps	(revision 1956)
@@ -0,0 +1,2 @@
+MAILTO=scripts-root@mit.edu
+27 5 * * * root find / -xdev -not -perm -o=x -prune -o -type f -print0 | xargs -0r getcap | cut -d' ' -f1 | grep -Fxvf /etc/scripts/allowed-filecaps.list | sed 's/^/Extra file_caps binary: /'
Index: branches/fc15-dev/server/fedora/config/etc/yum/post-actions/capoverride.action
===================================================================
--- branches/fc15-dev/server/fedora/config/etc/yum/post-actions/capoverride.action	(revision 1956)
+++ branches/fc15-dev/server/fedora/config/etc/yum/post-actions/capoverride.action	(revision 1956)
@@ -0,0 +1,9 @@
+/usr/sbin/mtr:install:setcap -r /usr/sbin/mtr
+/usr/bin/rsh:install:setcap -r /usr/bin/rsh
+/usr/bin/rcp:install:setcap -r /usr/bin/rcp
+/usr/bin/gnome-keyring-daemon:install:setcap -r /usr/bin/gnome-keyring-daemon
+/usr/bin/newrole:install:setcap -r /usr/bin/newrole
+/usr/bin/rlogin:install:setcap -r /usr/bin/rlogin
+/usr/libexec/pt_chown:install:setcap -r /usr/libexec/pt_chown
+/bin/ping6:install:setcap -r /bin/ping6
+/bin/ping:install:setcap -r /bin/ping