PR_SET_KEEPCAPS(2const)

PR_SET_KEEPCAPS2const

Set the state of the "keep capabilities" flag

Usage

#include <linux/prctl.h>  /* Definition of PR_* constants */
#include <sys/prctl.h>

int prctl(PR_SET_KEEPCAPS, long state);

Library

Standard C library (libc, -lc)

Overview

Set the state of the calling thread's "keep capabilities" flag. The effect of this flag is described in capabilities(7). state must be either 0L (clear the flag) or 1L (set the flag). The "keep capabilities" value will be reset to 0 on subsequent calls to execve(2).

Return value

On success, 0 is returned. On error, -1 is returned, and errno is set to indicate the error.

Errors

EINVAL

state is not a valid value.

EPERM

The caller's SECBIT_KEEP_CAPS_LOCKED flag is set (see capabilities(7)).

Releases

2 releases since Debian 13 (Trixie); the text changed 1 time.

  1. 13
  2. Arch

Standards

Linux.

History

Linux 2.2.18.

From man-pages 6.19-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.