From 6c21c0f9470e2a47e36dfdeee9834ab74f542462 Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Mon, 2 Jun 2014 15:18:38 +0200 Subject: [PATCH] user_namespaces.7: Say a little less about execve(2) and user ID mappings The existing discussion under user and group ID mappings probably suffices. Reported-by: Eric W. Biederman Signed-off-by: Michael Kerrisk --- man7/user_namespaces.7 | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/man7/user_namespaces.7 b/man7/user_namespaces.7 index 2bc8e3f94..1dfb9125b 100644 --- a/man7/user_namespaces.7 +++ b/man7/user_namespaces.7 @@ -132,12 +132,7 @@ Note that a call to .BR execve (2) will cause a process to lose any capabilities that it has, unless it has a user ID of 0 within the namespace. -Thus, before calling -.BR execve (2), -a user ID mapping for ID 0 must be defined, -and the caller may also need to use -.BR setuid (2) -or similar to set its user ID to 0. +See the discussion of user and group ID mappings, below. A call to .BR clone (2),