getauxval.3: File capabilities also trigger AT_SECURE

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2015-07-15 16:36:02 +02:00
parent fe56ce1c5f
commit 17e38dad94
1 changed files with 4 additions and 1 deletions

View File

@ -148,7 +148,10 @@ The address of sixteen bytes containing a random value.
.BR AT_SECURE
Has a nonzero value if this executable should be treated securely.
Most commonly, a nonzero value indicates that the process is
executing a set-user-ID or set-group-ID program; alternatively,
executing a set-user-ID or set-group-ID binary,
or a binary file that has capabilities (see
.BR capabilities (7));
alternatively,
a nonzero value may be triggered by a Linux Security Module.
When this value is nonzero,
the dynamic linker disables the use of certain environment variables (see