Lines Matching full:dropping
1219 /* Keep CAP_SETPCAP for dropping bounding set bits. */
1234 * Instead of dropping bounding set first, do it here in case
1317 * If we're dropping caps, get the last valid cap from /proc now,
1391 * don't need to allow privilege-dropping syscalls.
1402 * we need to set seccomp filter *before* dropping privileges.
1404 * setgroups()/setresgid()/setresuid() for dropping root and
1405 * capget()/capset()/prctl() for dropping caps.
1425 * privilege-dropping syscalls :)
