mount.2: MS_NOSUID also disables file capabilities

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-05-10 20:01:10 +01:00
parent b517a36f9c
commit 4be9e801da
1 changed files with 2 additions and 2 deletions

View File

@ -235,8 +235,8 @@ Do not allow programs to be executed from this filesystem.
.\" users cannot execute files uploaded using ftp or so.)
.TP
.B MS_NOSUID
Do not honor set-user-ID and set-group-ID bits when executing
programs from this filesystem.
Do not honor set-user-ID and set-group-ID bits or file capabilities
when executing programs from this filesystem.
.\" (This is a security feature to prevent users executing set-user-ID and
.\" set-group-ID programs from removable disk devices.)
.TP