mirror of https://github.com/mkerrisk/man-pages
user_namespaces.7: wfix: Improve wording in discussion of resetting of 'securebits' flags
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
4d7a0dbc8b
commit
41f974b9fc
|
@ -148,13 +148,16 @@ the process will lose all capabilities.
|
|||
See the discussion of user and group ID mappings, below.
|
||||
.PP
|
||||
A call to
|
||||
.BR clone (2),
|
||||
.BR unshare (2),
|
||||
.BR clone (2)
|
||||
or
|
||||
.BR setns (2)
|
||||
.BR unshare (2)
|
||||
using the
|
||||
.BR CLONE_NEWUSER
|
||||
flag sets the "securebits" flags
|
||||
flag
|
||||
or a call to
|
||||
.BR setns (2)
|
||||
that moves the caller into a another user namespace
|
||||
sets the "securebits" flags
|
||||
(see
|
||||
.BR capabilities (7))
|
||||
to their default values (all flags disabled) in the child (for
|
||||
|
|
Loading…
Reference in New Issue