CAPNG_LOCK - Online Linux Manual PageSection : 3
Updated : June 2009
Source : Red Hat
Note : Libcap-ng API

---

NAMEcapng_lock − lock the current process capabilities settings

---

SYNOPSIS#include <cap-ng.h> int capng_lock(void);

---

DESCRIPTIONcapng_lock will take steps to prevent children of the current process to regain full privileges if the uid is 0. This should be called while possessing the CAP_SETPCAP capability in the kernel. This function will do the following if permitted by the kernel: Set the NOROOT option on for PR_SET_SECUREBITS, set the NOROOT_LOCKED option to on for PR_SET_SECUREBITS, set the PR_NO_SETUID_FIXUP option on for PR_SET_SECUREBITS, and set the PR_NO_SETUID_FIXUP_LOCKED option on for PR_SET_SECUREBITS.

---

RETURN VALUEThis returns 0 on success and a negative number on failure. -1 means a failure setting any of the PR_SET_SECUREBITS options.

---

SEE ALSOcapng_apply(3), prctl(2), capabilities(7)

---

AUTHORSteve Grubb 0

---

Johanes Gumabo

---

Data Size   :   3,397 byte
man-capng_lock.3Build   :   2024-12-05, 20:55   :  
Visitor Screen   :   x
Visitor Counter ( page / site )   :   2 / 239,036
Visitor ID   :     :  
Visitor IP   :   18.221.157.203   :  
Visitor Provider   :   AMAZON-02   :  
Provider Position ( lat x lon )   :   39.962500 x -83.006100   :   x
Provider Accuracy Radius ( km )   :   1000   :  
Provider City   :   Columbus   :  
Provider Province   :   Ohio ,   :   ,
Provider Country   :   United States   :  
Provider Continent   :   North America   :  
Visitor Recorder   :   Version   :  
Visitor Recorder   :   Library   :  
Online Linux Manual Page   :   Version   :   Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page   :   Library   :   lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page   :   Library   :   lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base   :   Version   :   Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base   :   Library   :   lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36

---

Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .

---

If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.

---