Module securebits

Manipulate securebits flags

This module exposes methods to get and set per-thread securebits flags, which can be used to disable special handling of capabilities for UID 0 (root).

Functions

has_keepcaps

Return whether the current thread’s “keep capabilities” flag is set.

set_keepcaps

Set the value of the current thread’s “keep capabilities” flag.