NAME¶

PR_GET_NO_NEW_PRIVS - get the calling thread's no_new_privs attribute

LIBRARY¶

Standard C library (libc, -lc)

SYNOPSIS¶

#include <linux/prctl.h>  /* Definition of PR_* constants */
#include <sys/prctl.h>

int prctl(PR_GET_NO_NEW_PRIVS, 0L, 0L, 0L, 0L);

DESCRIPTION¶

Return the value of the no_new_privs attribute for the calling thread. A value of 0 indicates the regular execve(2) behavior. A value of 1 indicates execve(2) will operate in the privilege-restricting mode described in PR_SET_NO_NEW_PRIVS(2const).

RETURN VALUE¶

On success, PR_GET_NO_NEW_PRIVS returns the boolean value described above. On error, -1 is returned, and errno is set to indicate the error.

FILES¶

/proc/pid/status

Since Linux 4.10, the value of a thread's no_new_privs attribute can be viewed via the NoNewPrivs field in this file.

STANDARDS¶

Linux.

HISTORY¶

Linux 3.5.

SEE ALSO¶

prctl(2), PR_SET_NO_NEW_PRIVS(2const)