from small one page howto to huge articles all in one place
poll results
Last additions:
May 25th. 2007:
April, 26th. 2006:
| You are here: manpages
CAPNG_LOCK
Section: Libcap-ng API (3) Updated: June 2009 Index
Return to Main Contents
NAME
capng_lock - lock the current process capabilities settings
SYNOPSIS
#include <cap-ng.h>
int capng_lock(void);
DESCRIPTION
capng_lock will take steps to prevent children of the current process to regain full privileges if the uid is 0. This should be called while possessing the CAP_SETPCAP capability in the kernel. This function will do the following if permitted by the kernel: Set the NOROOT option on for PR_SET_SECUREBITS, set the NOROOT_LOCKED option to on for PR_SET_SECUREBITS, set the PR_NO_SETUID_FIXUP option on for PR_SET_SECUREBITS, and set the PR_NO_SETUID_FIXUP_LOCKED option on for PR_SET_SECUREBITS.
RETURN VALUE
This returns 0 on success and a negative number on failure. -1 means a failure setting any of the PR_SET_SECUREBITS options.
SEE ALSO
capng_apply(3),
prctl(2),
capabilities(7)
AUTHOR
Steve Grubb
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- RETURN VALUE
-
- SEE ALSO
-
- AUTHOR
-
| 
|
|
- Running on 
-
:
: 