Gate name_to_handle_at by CAP_SYS_ADMIN not CAP_DAC_READ_SEARCH
Gate name_to_handle_at by CAP_SYS_ADMIN not CAP_DAC_READ_SEARCH

Only open_by_handle_at requires CAP_DAC_READ_SEARCH.

This allows systemd to run with only `--cap-add SYS_ADMIN`
rather than having to also add `--cap-add DAC_READ_SEARCH`
as well which it does not really need.

Signed-off-by: Justin Cormack <af64ee19f04db9509cb02b0e470e11e5402ef9b3@docker.com>
(cherry picked from commit c1ca124682a90f3306b34ad104ba80e413f7bf88)
Signed-off-by: Tibor Vass <3f1326dff4d85ad4ec938fb33f64575ace96db26@docker.com>

thaJeztah/docker.github.io,phiroict/docker,joeuo/docker.github.io,rillig/docker.github.io,menglingwei/denverdino.github.io,danix800/docker.github.io,medallia/docker,joaofnfernandes/docker.github.io,denverdino/denverdino.github.io,stainboy/docker,joeuo/docker.github.io,docker/docker.github.io,johnstep/docker.github.io,johnstep/docker.github.io,denverdino/denverdino.github.io,anweiss/docker.github.io,jzwlqx/denverdino.github.io,aduermael/docker.github.io,docker-zh/docker.github.io,danix800/docker.github.io,menglingwei/denverdino.github.io,thaJeztah/docker.github.io,joaofnfernandes/docker.github.io,medallia/docker,docker-zh/docker.github.io,anweiss/docker.github.io,denverdino/docker.github.io,gdevillele/docker.github.io,joeuo/docker.github.io,docker/docker.github.io,shin-/docker.github.io,medallia/docker,jzwlqx/denverdino.github.io,joaofnfernandes/docker.github.io,joeuo/docker.github.io,bdwill/docker.github.io,rillig/docker.github.io,anweiss/docker.github.io,jzwlqx/denverdino.github.io,shin-/docker.github.io,thaJeztah/docker.github.io,rillig/docker.github.io,alexisbellido/docker.github.io,phiroict/docker,JimGalasyn/docker.github.io,menglingwei/denverdino.github.io,denverdino/docker.github.io,danix800/docker.github.io,LuisBosquez/docker.github.io,aduermael/docker.github.io,troy0820/docker.github.io,phiroict/docker,bdwill/docker.github.io,aduermael/docker.github.io,londoncalling/docker.github.io,docker/docker.github.io,shubheksha/docker.github.io,troy0820/docker.github.io,jzwlqx/denverdino.github.io,LuisBosquez/docker.github.io,stainboy/docker,menglingwei/denverdino.github.io,joaofnfernandes/docker.github.io,alexisbellido/docker.github.io,LuisBosquez/docker.github.io,thaJeztah/docker.github.io,jzwlqx/denverdino.github.io,shin-/docker.github.io,menglingwei/denverdino.github.io,sanscontext/docker.github.io,denverdino/docker.github.io,johnstep/docker.github.io,sanscontext/docker.github.io,shubheksha/docker.github.io,shin-/docker.github.io,medallia/docker,joaofnfernandes/docker.github.io,docker-zh/docker.github.io,troy0820/docker.github.io,denverdino/denverdino.github.io,LuisBosquez/docker.github.io,londoncalling/docker.github.io,sanscontext/docker.github.io,londoncalling/docker.github.io,anweiss/docker.github.io,BSWANG/denverdino.github.io,aduermael/docker.github.io,anweiss/docker.github.io,troy0820/docker.github.io,shin-/docker.github.io,shubheksha/docker.github.io,docker/docker.github.io,BSWANG/denverdino.github.io,JimGalasyn/docker.github.io,denverdino/docker.github.io,johnstep/docker.github.io,gdevillele/docker.github.io,gdevillele/docker.github.io,bdwill/docker.github.io,denverdino/denverdino.github.io,BSWANG/denverdino.github.io,gdevillele/docker.github.io,shubheksha/docker.github.io,johnstep/docker.github.io,denverdino/denverdino.github.io,bdwill/docker.github.io,londoncalling/docker.github.io,denverdino/docker.github.io,danix800/docker.github.io,JimGalasyn/docker.github.io,alexisbellido/docker.github.io,phiroict/docker,bdwill/docker.github.io,gdevillele/docker.github.io,BSWANG/denverdino.github.io,sanscontext/docker.github.io,docker-zh/docker.github.io,JimGalasyn/docker.github.io,alexisbellido/docker.github.io,sanscontext/docker.github.io,phiroict/docker,BSWANG/denverdino.github.io,LuisBosquez/docker.github.io,docker/docker.github.io,londoncalling/docker.github.io,alexisbellido/docker.github.io,thaJeztah/docker.github.io,JimGalasyn/docker.github.io,shubheksha/docker.github.io,docker-zh/docker.github.io,stainboy/docker,joeuo/docker.github.io,rillig/docker.github.io