Files and directories that have restrictive permissions and/or are now owned by *root:root* require `cp` to have additional process capabilities in order to copy them to the writable filesystem.
Files and directories that have restrictive permissions and/or are now owned by *root:root* require `cp` to have additional process capabilities in order to copy them to the writable filesystem.