capabilities.7: Add various operations under CAP_SYS_ADMIN

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2012-03-02 07:27:40 +13:00
parent 18a97acf29
commit 0f807eeafc
1 changed files with 31 additions and 4 deletions

View File

@ -44,7 +44,7 @@
.\" 2011-09-07, mtk/Serge hallyn: Add CAP_SYSLOG .\" 2011-09-07, mtk/Serge hallyn: Add CAP_SYSLOG
.\" FIXME: Linux 3.0 added CAP_WAKE_ALARM .\" FIXME: Linux 3.0 added CAP_WAKE_ALARM
.\" .\"
.TH CAPABILITIES 7 2011-10-04 "Linux" "Linux Programmer's Manual" .TH CAPABILITIES 7 2012-03-05 "Linux" "Linux Programmer's Manual"
.SH NAME .SH NAME
capabilities \- overview of Linux capabilities capabilities \- overview of Linux capabilities
.SH DESCRIPTION .SH DESCRIPTION
@ -284,8 +284,8 @@ in system calls that open files (e.g.,
.BR pipe (2)); .BR pipe (2));
.IP * .IP *
employ employ
.B CLONE_NEWNS .B CLONE_*
flag with flags that create new namespaces with
.BR clone (2) .BR clone (2)
and and
.BR unshare (2); .BR unshare (2);
@ -293,6 +293,9 @@ and
call call
.BR setns (2); .BR setns (2);
.IP * .IP *
call
.BR fanotify_init (2);
.IP *
perform perform
.B KEYCTL_CHOWN .B KEYCTL_CHOWN
and and
@ -303,7 +306,31 @@ operations;
perform perform
.BR madvise (2) .BR madvise (2)
.B MADV_HWPOISON .B MADV_HWPOISON
operation. operation;
.IP *
employ the
.B TIOCSTI
.BR ioctl (2)
to insert characters into the input queue of a terminal other than
the caller's controlling terminal.
.IP *
access privileged
.I perf
event information;
.IP *
employ the obsolete
.BR bdflush (2)
system call;
.IP *
perform various privileged block-device
.BR ioctl (2)
operations;
.IP *
perform various privileged file-system
.BR ioctl (2)
operations;
.IP *
perform administrative operations on many device drivers.
.RE .RE
.PD .PD
.TP .TP