cap_disable_effective
int cap_disable_effective(__u64 caps, __u64 *old_caps);
ASSERT_OK(cap_disable_effective(net_bind_svc_cap, &old_caps),
cap_disable_effective(cap_mask, &old_caps);
cap_disable_effective(cap_mask, &old_caps);
if (!ASSERT_OK(cap_disable_effective(1ULL << CAP_SYS_BOOT, &save_caps), "drop_caps"))
ret = cap_disable_effective(1ULL << CAP_SYS_ADMIN | 1ULL << CAP_PERFMON, NULL);
return cap_disable_effective((1ULL << CAP_BPF) |
if (!ASSERT_OK(cap_disable_effective(ALL_CAPS, &save_caps), "disable caps"))
err = cap_disable_effective(1ULL << CAP_SYS_ADMIN, &old_caps);
err = cap_disable_effective(caps_to_drop, &caps->old_caps);
err = cap_disable_effective(ADMIN_CAPS, NULL);
if (cap_disable_effective(1ULL << CAP_SYS_ADMIN, &caps)) {
if (cap_disable_effective(1ULL << CAP_SYS_ADMIN, &caps))