NEWS: mention dropping capabilities

diff --git a/NEWS b/NEWS
index b84918a4798a12dc3c12dfbb3f84298a6293cbad..3618d803076271ab79b6decd3248d1cf007dfd29 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -14,6 +14,7 @@ Improvements
 - increase file-descriptor count limit to maximum allowed value (hard limit)
 - watchdog module: support testing a DNS query (and switch C -> lua; !878)
 - performance: use sendmmsg syscall towards clients by default (!877)
+- daemon now attempts to drop all capabilities (!896)
 
 
 Knot Resolver 4.2.2 (2019-10-07)