Policy Drop capabilities "ALL"

[joachimBurket]

In the Drop capabilities policy, there isn't the "ALL" option.

We would like to create a policy to drop at least a list of capabilities (KILL, MKNOD, SETGID, SETUID). But when a deployment drops ALL, the policy is trigged because the deployment doesn't drop the list.
Is there a way to configure a policy to drop the list or more?

[porridge]

@stackrox/core-workflows please let @joachimBurket know what you think.

[porridge]

@joachimBurket making this possible is on the roadmap.

[joachimBurket]

thanks for you answer @porridge, I'm looking forward for this feature to be available :)