DOKK / manpages / debian 12 / libcap-ng-dev / libdrop_ambient.7.en
LIBDROP_AMBIENT(7) Libcap-ng API LIBDROP_AMBIENT(7)

libdrop_ambient - force application started with ambient capabilities to drop them

This library can be used via LD_PRELOAD to force an application started with ambient capabilities to drop them. It leaves other capabilities intact. This can also be linked against and automatically does the right thing. You do not need to make any calls into the library because all the work is done in the constructor which runs before main() is called.

capabilities(7)

Steve Grubb

Nov 2020 Red Hat