From 3b21b29e5c927445fa0f2c048be3b1f4464c4f0c Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Thu, 15 Dec 2016 10:02:59 +0100 Subject: [PATCH] execve.2: File capabilities can be ignored for the same reasons as set-UID/set-GID Signed-off-by: Michael Kerrisk --- man2/execve.2 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/man2/execve.2 b/man2/execve.2 index 68003ebf8..def2e65e2 100644 --- a/man2/execve.2 +++ b/man2/execve.2 @@ -117,6 +117,10 @@ or .IP * the calling process is being ptraced. .PP +The capabilities of the program file (see +.BR capabilities (7)) +are also if any of the above are true. +.PP The effective user ID of the process is copied to the saved set-user-ID; similarly, the effective group ID is copied to the saved set-group-ID. This copying takes place after any effective ID changes that occur