pub fn apply(prog: &Prog<'_>) -> Result<()>Expand description
Sets no_new_privs and installs prog for the calling thread. It
cannot be removed and is inherited across fork and execve.
Only calls prctl, so it is async-signal-safe and may run between
fork and exec (for example from CommandExt::pre_exec).
ยงErrors
Returns the OS error when either prctl call fails, for example when the
kernel lacks seccomp filters or the program is too long.