prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
fork()