getrlimit.2: Note user namespace semantics for CAP_SYS_RESOURCE

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-06-26 20:36:33 +02:00
parent e31d1beb76
commit 32dbbd6416
1 changed files with 2 additions and 1 deletions

View File

@ -449,7 +449,8 @@ is 0, then the call applies to the calling process.
To set or get the resources of a process other than itself,
the caller must have the
.B CAP_SYS_RESOURCE
capability, or the
capability in the user namespace of the process
whose resource limits are being changed, or the
real, effective, and saved set user IDs of the target process
must match the real user ID of the caller
.I and