prctl$PR_SET_KEEPCAPS(0x2f, 0x4)