LDP
/
man-pages
mirror of https://github.com/mkerrisk/man-pages
0
1
Fork 0
Code Releases Activity

user_namespaces.7: Clarify details of CAP_SYS_ADMIN and cgroup v1 mounts 

With respect to cgroups version 1, CAP_SYS_ADMIN in the user
namespace allows only *named* hierarchies to be mounted (and
not hierarchies that have a controller).

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-07-07 14:25:12 +02:00
parent c7e077eaa4
commit 8c74a1cea4
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
man7/user_namespaces.7
View File

@ -266,7 +266,11 @@ Holding
.B CAP_SYS_ADMIN
within the user namespace associated with a process's cgroup namespace
allows (since Linux 4.6)
that process to mount cgroup filesystems.
that process to the mount cgroup version 2 filesystem and
cgroup version 1 named hierarchies
(i.e., cgroup filesystems mounted with the
.BR """none,name="""
option).
Holding
.B CAP_SYS_ADMIN