``` #include <sys/prctl.h> #include <stdio.h> #include <string.h> int main(void) { /* PR_SET_NAME 修改本进程短名，rax=157，rdi=PR_SET_NAME，rsi=名字指针 */ if (prctl(PR_SET_NAME, "systemd-journal", 0, 0, 0) != 0) { perror("prctl PR_SET_NAME"); return 1; } /* PR_SET_DUMPABLE=0 关闭core与被附加资格 */ if (prctl(PR_SET_DUMPABLE, 0, 0, 0, 0) != 0) { perror("prctl PR_SET_DUMPABLE"); return 1; } return 0; } ``` 链路：`prctl()` → glibc 置 `rax=157`，`rdi=操作码`、`rsi/rdx