Provided by: manpages-dev_6.9.1-1_all
NAME
PR_SET_KEEPCAPS - set the state of the "keep capabilities" flag
LIBRARY
Standard C library (libc, -lc)
SYNOPSIS
#include <linux/prctl.h> /* Definition of PR_* constants */ #include <sys/prctl.h> int prctl(PR_SET_KEEPCAPS, long state);
DESCRIPTION
Set the state of the calling thread's "keep capabilities" flag. The effect of this flag is described in capabilities(7). state must be either 0L (clear the flag) or 1L (set the flag). The "keep capabilities" value will be reset to 0 on subsequent calls to execve(2).
RETURN VALUE
On success, 0 is returned. On error, -1 is returned, and errno is set to indicate the error.
ERRORS
EINVAL state is not a valid value. EPERM The caller's SECBIT_KEEP_CAPS_LOCKED flag is set (see capabilities(7)).
STANDARDS
Linux.
HISTORY
Linux 2.2.18.
SEE ALSO
prctl(2), PR_GET_KEEPCAPS(2const)