pub fn clear(tid: Option<i32>, cset: CapSet) -> Result<(), CapsError>Expand description
Clear all capabilities in a set for a thread.
All capabilities will be cleared from set cset for thread tid.
If tid is None, this operates on current thread (tid=0).
It cannot manipulate Ambient or Bounding set of other processes.