PR_CAPBSET_DROP2const
Drop a capability from the calling thread's capability bounding set
Usage
#include <linux/prctl.h> /* Definition of PR_* constants */ #include <sys/prctl.h>
int prctl(PR_CAPBSET_DROP, long cap);
Library
Standard C library (libc, -lc)
Overview
Drop the capability specified by cap from the calling thread's capability bounding set. Any children of the calling thread will inherit the newly reduced bounding set.
Return value
On success, 0 is returned. On error, -1 is returned, and errno is set to indicate the error.
Errors
EINVAL
|
File capabilities are not enabled in the kernel. |
|---|---|
EINVAL
|
cap does not specify a valid capability. |
EPERM
|
The caller does not have the |
Versions
A higher-level interface layered on top of this operation is provided in the libcap(3) library in the form of cap_drop_bound(3).
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.