Hmm

nixos/modules/security/permissions-wrappers/permissions-wrapper.c

@@ -211,8 +211,9 @@ int main(int argc, char * * argv)
     // Read the capabilities set on the file and raise them in to the
     // Ambient set so the program we're wrapping receives the
     // capabilities too!
-    if (strcmp(wrapperType, "setcap") == 0)
-        assert(!make_caps_ambient(selfPath));
+
+
+    assert(!make_caps_ambient(selfPath));
 
     execve(sourceProg, argv, environ);