-
Colin Walters authored
We now rely on PR_SET_NO_NEW_PRIVS, so make that clearer. The old comment around uid 0 for `SECBIT_NOROOT` was actually wrong, because we always setuid back to the calling user.
6f74ad47
We now rely on PR_SET_NO_NEW_PRIVS, so make that clearer. The old comment around uid 0 for `SECBIT_NOROOT` was actually wrong, because we always setuid back to the calling user.