Yes, Linux has capability-based security modules, but they're hardly ever used, and I'm not aware of any embedded device running Linux which does use it.