The oslo_privsep.capabilities Module¶

oslo_privsep.capabilities.drop_all_caps_except(effective, permitted, inheritable)¶

Set (effective, permitted, inheritable) to provided list of caps

oslo_privsep.capabilities.get_caps()¶

Return (effective, permitted, inheritable) as lists of caps

oslo_privsep.capabilities.set_keepcaps(enable)¶

Set/unset thread’s “keep capabilities” flag - see prctl(2)