sepolicy/policy/chromeos/policy_capabilities

policycap nnp_nosuid_transition;