From 8ec68b89b4476e71f18c70a1abebf62ffc31c5f3 Mon Sep 17 00:00:00 2001
From: Shawn Landden <shawn@churchofgit.com>
Date: Thu, 28 Nov 2013 13:42:13 -0800
Subject: [PATCH] kcmp.2: Note about SECURITY_YAMA

---
 man2/kcmp.2 | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/man2/kcmp.2 b/man2/kcmp.2
index b13cc437c..d834a17bf 100644
--- a/man2/kcmp.2
+++ b/man2/kcmp.2
@@ -187,7 +187,12 @@ is invalid.
 Insufficient permission to inspect process resources.
 The
 .B CAP_SYS_PTRACE
-capability is required to inspect processes that you do not own.
+capability is required to inspect processes that you do not own. Other
+limitations on ptrace apply, such as
+.BR CONFIG_SECURITY_YAMA ,
+which when /proc/sys/kernel/yama/ptrace_scope is 2 (the default) limits
+.BR kcmp()
+to child processes.
 .TP
 .B ESRCH
 Process