Disable capabilities usage
When enable libgcrypt drop all capabilities and this brakes apps like
cryptsetup.
Test case:
-bash-4.2# dd if=/dev/zero of=raw bs=1024k count=256
256+0 records in
256+0 records out
268435456 bytes (268 MB) copied, 2.43644 s, 110 MB/s
-bash-4.2# dd if=/dev/urandom of=key bs=1k count=20
20+0 records in
20+0 records out
20480 bytes (20 kB) copied, 0.
00640287 s, 3.2 MB/s
-bash-4.2# cryptsetup luksFormat raw key
WARNING!
========
This will overwrite data on raw irrevocably.
Are you sure? (Type uppercase yes): YES
-bash-4.2# strace -eioctl cryptsetup luksOpen raw x --key-file=key
ioctl(5, DM_VERSION, 0x156a930) = -1 EACCES (Permission denied)
Cannot initialize device-mapper. Is dm_mod kernel module loaded?
+++ exited with 1 +++