user_namespaces.7: wfix: reword a long, difficult to understand sentence

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-06-20 21:03:37 +02:00
parent 0a66259f35
commit a3969b76b9
1 changed files with 5 additions and 5 deletions

View File

@ -133,11 +133,11 @@ even if the new namespace is created or joined by the root user
Note that a call to
.BR execve (2)
will cause a process's capabilities to be recalculated in the usual way (see
.BR capabilities (7)),
so that usually,
unless it has a user ID of 0 within the namespace or the executable file
has a nonempty inheritable capabilities mask,
it will lose all capabilities.
.BR capabilities (7)).
Consequently,
unless the process has a user ID of 0 within the namespace,
or the executable file has a nonempty inheritable capabilities mask,
the process will lose all capabilities.
See the discussion of user and group ID mappings, below.
A call to