/proc/pid/status
Since Linux 4.10, the value of a thread's no_new_privs attribute can be viewed via the NoNewPrivs field in this file.
PR_GET_NO_NEW_PRIVS2const
Get the calling thread's no_new_privs attribute
Usage
#include <linux/prctl.h> /* Definition of PR_* constants */ #include <sys/prctl.h>
int prctl(PR_GET_NO_NEW_PRIVS, 0L, 0L, 0L, 0L);
Library
Standard C library (libc, -lc)
Overview
Return the value of the no_new_privs attribute for the calling thread. A value of 0 indicates the regular execve(2) behavior. A value of 1 indicates execve(2) will operate in the privilege-restricting mode described in PR_SET_NO_NEW_PRIVS(2const).
Return value
On success, PR_GET_NO_NEW_PRIVS returns the boolean value described above. On error, -1 is returned, and errno is set to indicate the error.
Files
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.