diff --git a/local/patches/kernel/P27-capability-bitmask.patch b/local/patches/kernel/P27-capability-bitmask.patch
index 0612955318..4afc058544 100644
--- a/local/patches/kernel/P27-capability-bitmask.patch
+++ b/local/patches/kernel/P27-capability-bitmask.patch
@@ -129,3 +129,12 @@ index 86aabc2..4af65a3 100644
 +++ b/src/startup/mod.rs
 @@ -190,0 +191 @@ pub(crate) fn kmain(bootstrap: Bootstrap) -> ! {
 +            context.caps = crate::scheme::caps::CAP_ALL;
+diff --git a/src/scheme/proc.rs b/src/scheme/proc.rs
+--- a/src/scheme/proc.rs
++++ b/src/scheme/proc.rs
+@@ -1275,0 +1276,5 @@ impl ContextHandle {
++                guard.caps = if info.euid == 0 {
++                    crate::scheme::caps::CAP_ALL
++                } else {
++                    0
++                };