pr_get_no_new_privs(2const)

NAME#

PR_GET_NO_NEW_PRIVS - get the calling thread's no_new_privs attribute

LIBRARY#

Standard C library (libc, -lc)

SYNOPSIS#

#include <linux/prctl.h>\n  /* Definition of \nPR_*\n constants */
\n#include <sys/prctl.h>

int prctl(PR_GET_NO_NEW_PRIVS, 0L, 0L, 0L, 0L);

DESCRIPTION#

Return the value of the no_new_privs attribute for the calling thread. A value of 0 indicates the regular execve(2) behavior. A value of 1 indicates execve(2) will operate in the privilege-restricting mode described in PR_SET_NO_NEW_PRIVS(2const).

RETURN VALUE#

On success, PR_GET_NO_NEW_PRIVS returns the boolean value described above. On error, -1 is returned, and errno is set to indicate the error.

FILES#

/proc/pid/status

Since Linux 4.10, the value of a thread's no_new_privs attribute can be viewed via the NoNewPrivs field in this file.

STANDARDS#

Linux.

HISTORY#

Linux 3.5.

SEE ALSO#

prctl(2), PR_SET_NO_NEW_PRIVS(2const)