Function bypasses_read_permission_checks 

pub fn bypasses_read_permission_checks(sc: &SecurityContext) -> bool

Whether a container context can read any file regardless of owner and mode: it is privileged: true, or it adds DAC_OVERRIDE or DAC_READ_SEARCH. Only meaningful for a root process (capabilities are inert for any other UID).