[staticassertion]

"generally, in practice"

There's also openat on linux. My point is that the general, practiced approach is not capability based.

[trasz]

It it’s not capability based, because Linux doesn’t provide necessary functionality. FreeBSD does, as explained in the man page I’ve linked to.