/proc/pid/setgroups − allow or deny setting groups
/proc/pid/setgroups (since Linux 3.19)
See user_namespaces(7).
proc(5)