pub fn do_clone(r: &Req<'_>, nr: i64) -> Result<Outcome, i32>Expand description
clone/fork/vfork/clone3: refuse a new namespace, snapshot the
parent for the child without ptrace, then continue.
clone3 arrives here in both modes, since its flags live in memory where
the filter cannot see them.
ยงArguments
r- The notification.nr- Canonical syscall number.