// This test verifies that an operation ('ping') that needs `NET_RAW`
// capability does not succeed if the capability `NET_RAW` is dropped.
Try<Capabilities> manager = Capabilities::create();
Try<ProcessCapabilities> capabilities = manager->get();
Try<Subprocess> s = ping(capabilities->get(capabilities::PERMITTED));
Future<Option<int>> status = s->status();