retrieved using the prctl (2) PR_SET_SECUREBITS and PR_GET_SECUREBITS operations ... program with associated file capabilities: prctl(PR_SET_SECUREBITS, /* SECBIT_KEEP_CAPS off */ …