Function remove_capability_from_bounding_set

src/thread/prctl.rs:489–498

(capability: impl CompatCapability)

/// [`prctl(PR_CAPBSET_DROP,…)`]: https://man7.org/linux/man-pages/man2/prctl.2.html
#[inline]
pub fn remove_capability_from_bounding_set(capability: impl CompatCapability) -> io::Result<()> {
    let capset = capability.as_capability_set(private::Token).bits();
    if capset.count_ones() != 1 {
        return Err(Errno::INVAL);
    }
    let cap = capset.trailing_zeros();

    // as *mut _ should be ptr::without_provenance_mut but our MSRV does not allow it.
    unsafe { prctl_2args(PR_CAPBSET_DROP, cap as usize as *mut _) }.map(|_r| ())
}

//
// PR_GET_SECUREBITS/PR_SET_SECUREBITS