prctl$PR_GET_KEEPCAPS(0x7)