unshare_userns
extern int unshare_userns(unsigned long unshare_flags, struct cred **new_cred);
err = unshare_userns(unshare_flags, &new_cred);