LDP
/
man-pages
mirror of https://github.com/mkerrisk/man-pages
0
1
Fork 0
Code Releases Activity

1,$s/inherited/inheritable/g

This commit is contained in:
Michael Kerrisk 2005-05-30 09:56:32 +00:00
parent 9d2a7b1f62
commit 5bdccabd8e
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
man7/capabilities.7
View File

@ -273,7 +273,7 @@ If a process drops a capability from its permitted set,
it can never re-acquire that capability (unless it execs a
set-UID-root program).
.TP
.IR Inherited :
.IR inheritable :
the capabilities preserved across an
.BR execve (2).
.PP
@ -342,12 +342,12 @@ will determine the capabilities of a process after an
.IR exec :
.TP
.IR Allowed :
this set is ANDed with the process's inherited set to determine which
inherited capabilities are permitted to the process after the exec.
this set is ANDed with the process's inheritable set to determine which
inheritable capabilities are permitted to the process after the exec.
.TP
.IR Forced :
the capabilities automatically permitted to the process,
regardless of the process's inherited capabilities.
regardless of the process's inheritable capabilities.
.TP
.IR Effective :
those capabilities in the process's new permitted set are
@ -372,11 +372,11 @@ the process using the following algorithm:
.in +4
.nf
P'(permitted) = (P(inherited) & F(allowed)) | (F(forced) & cap_bset)
P'(permitted) = (P(inheritable) & F(allowed)) | (F(forced) & cap_bset)
P'(effective) = P'(permitted) & F(effective)
P'(inherited) = P(inherited) [i.e., unchanged]
P'(inheritable) = P(inheritable) [i.e., unchanged]
.fi
.in -4