capabilities.7: Deemphasize the ancient prctl(2) PR_SET_KEEPCAPS command

The modern approach is SECBITS_KEEP_CAPS.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2017-12-02 16:18:32 +01:00
parent f7dbc40ee7
commit 7c8eb8f7cf
1 changed files with 0 additions and 3 deletions

View File

@ -1239,9 +1239,6 @@ are enabled in the effective set.
If a thread that has a 0 value for one or more of its user IDs wants
to prevent its permitted capability set being cleared when it resets
all of its user IDs to nonzero values, it can do so using the
.BR prctl (2)
.B PR_SET_KEEPCAPS
operation or the
.B SECBIT_KEEP_CAPS
securebits flag described below.
.\"