It appears that manipulation of file descriptors via /proc can circumvent permissions on parent directories of the file.
1154b08bf5a16a661c449cdcc6299271c9f319623fdee15cd66341aec640f300
Capabilities Linux kernel (2.2.9 - 2.3.4) patch for elf executables that lowers the capabilities of elf files on execution to enhance security.
e450fd2e03c4ce595ae345f008d012ce2780e7339937822aecfb417709ad469b