> #capsh --drop=cap_sys_rawio -- -c 'sg_inq /dev/pve/vm-115-disk-2' > Both SCSI INQUIRY and fetching ATA information failed on > /dev/pve/vm-115-disk-2 Why --drop=cap_sys_rawio ? Does kvm drop this when starting?