Shadow-utils filecaps not set correctly.

[rhatdan]

podman run quay.io/centos-bootc/centos-bootc:stream9 rpm -qV shadow-utils | grep /usr/bin/new.*map .......TP /usr/bin/newgidmap .......TP /usr/bin/newuidmap

If you do a RUN rpm --setcaps shadow-utils It fixes the issue. I think the tooling that builds the image is dropping file capabilties.