capabilities_linux.go
func (w *whitelist) drop() error {
	w.pid.Clear(allCapabilityTypes)
	w.pid.Set(allCapabilityTypes, w.keep...)
	return w.pid.Apply(allCapabilityTypes)
}
func (w *whitelist) drop() error {
	w.pid.Clear(allCapabilityTypes)
	w.pid.Set(allCapabilityTypes, w.keep...)
	return w.pid.Apply(allCapabilityTypes)
}
func ( w * whitelist ) drop ( ) error { w . pid . Clear ( allCapabilityTypes ) w . pid . Set ( allCapabilityTypes , w . keep ... ) return w . pid . Apply ( allCapabilityTypes ) }
// drop drops all capabilities for the current process except those specified in the whitelist.
drop drops all capabilities for the current process except those specified in the whitelist .