NAME¶

PR_SET_KEEPCAPS - set the state of the "keep capabilities" flag

LIBRARY¶

Standard C library (libc, -lc)

SYNOPSIS¶

#include <linux/prctl.h>  /* Definition of PR_* constants */
#include <sys/prctl.h>

int prctl(PR_SET_KEEPCAPS, long state);

DESCRIPTION¶

Set the state of the calling thread's "keep capabilities" flag. The effect of this flag is described in capabilities(7). state must be either 0L (clear the flag) or 1L (set the flag). The "keep capabilities" value will be reset to 0 on subsequent calls to execve(2).

RETURN VALUE¶

On success, 0 is returned. On error, -1 is returned, and errno is set to indicate the error.

ERRORS¶

EINVAL

state is not a valid value.

EPERM

The caller's SECBIT_KEEP_CAPS_LOCKED flag is set (see capabilities(7)).

STANDARDS¶

Linux.

HISTORY¶

Linux 2.2.18.

SEE ALSO¶

prctl(2), PR_GET_KEEPCAPS(2const)