CAP_SYS_ADMIN errors on everything?

[windchime]

hello,

i have been trying to setup grsecurity 2.0, and everything seems to be running smoothly, except that _everything_ i do as root seems to generate a "use of CAP_SYS_ADMIN denied" error. things like tail, grep, cat, etc, that i cant imagine are in need of CAP_SYS_ADMIN. also, it seems to have little to no impact on the commands being performed anyhow. is this normal? what is the proper way to deal with this in an acl? thanks!

chris.