userns_may_setgroups
extern bool userns_may_setgroups(const struct user_namespace *ns);
userns_may_setgroups(user_ns);