if (cap_rights_limit(STDIN_FILENO, CAP_FSTAT) < 0) error("cap_new: unable to limit STDIN_FILENO"); if (cap_rights_limit(STDOUT_FILENO, CAP_FSTAT | CAP_SEEK | CAP_WRITE) < 0) error("cap_new: unable to limit STDOUT_FILENO"); if (cap_rights_limit(STDERR_FILENO, CAP_FSTAT | CAP_SEEK | CAP_WRITE) < 0) error("cap_new: unable to limit STDERR_FILENO");