Signed-off-by: Christian Goeschel Ndjomouo <cgoesc2@wgu.edu>
*--list-caps*::
List all known capabilities. This option must be specified alone.
-*--no-new-privs*::
+*--nnp*, *--no-new-privs*::
Set the _no_new_privs_ bit. With this bit set, *execve*(2) will not grant new privileges. For example, the set-user-ID and set-group-ID bits as well as file capabilities will be disabled. (Executing binaries with these bits set will still work, but they will not gain privileges. Certain LSMs, especially AppArmor, may result in failures to execute certain programs.) This bit is inherited by child processes and cannot be unset. See *prctl*(2) and _Documentation/prctl/no_new_privs.txt_ in the Linux kernel source.
+
The _no_new_privs_ bit is supported since Linux 3.5.