...hread's bounding set to its inheritable set; drop capabilities from the bounding set (via prctl (2) PR_CAPBSET_DROP ); make changes to the securebits flags. If file capabilities…...wake-ups and saving power. For more details, see the description of PR_SET_TIMERSLACK in prctl (2). SEE ALSO date (1), time (1), timeout (1), adjtimex (2), alarm (2), clock_gett…...td.h> if the _GNU_SOURCE feature test macro is defined (see feature_test_macros (7)). The prctl (2) PR_SET_MM_ENV_START and PR_SET_MM_ENV_END operations can be used to control t…...ective user or group ID can also affect the process "dumpable" attribute, as described in prctl (2). Changes to process user and group IDs can affect the capabilities of the pro…...ID namespace of its parent (unless one of the nearer ancestors of the parent employed the prctl (2) PR_SET_CHILD_SUBREAPER command to mark itself as the reaper of orphaned desce…...e current thread from gaining more privileges (e.g., thanks to a set-user-ID binary). if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) { perror("Failed to restrict privileges"); clos…...ace. In such cases making the parent process dumpable, using PR_SET_DUMPABLE in a call to prctl (2), before creating a child process in a new user namespace may rectify this pro…