capabilities.7: Add a few more operations covered by CAP_SYS_ADMIN

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

man7/capabilities.7

@@ -449,6 +449,14 @@ operations on the
 device (see
 .BR random (4));
 .IP *
+install a
+.BR seccomp (2)
+filter without first having to set the
+.I no_new_privs
+thread attribute;
+.IP *
+modify allow/deny rules for device control groups.
+.IP *
 perform administrative operations on many device drivers.
 .RE
 .PD