[grsec] Features request

[Zbyniu Krzystolik]

Hello,
Some ideas: 

1. Support for capabilities and bind/connect in define,
2. Suppress log flag for subjects and roles,

3. Higher prio for nested subjects:
I have
subject /sbin/init:/sbin/blah o {
[...]
}
subject /sbin/blah o {
[...]
}
The first section will be never taken, even if init is parent.
Is it bug?

Best regards,
Zbyniu
-- 
\78\32\14\46\67\67\90\1A
%% Timeo me dubitare %%