diff --git a/man7/user_namespaces.7 b/man7/user_namespaces.7 index 56a73ec37..07f84028a 100644 --- a/man7/user_namespaces.7 +++ b/man7/user_namespaces.7 @@ -133,11 +133,11 @@ even if the new namespace is created or joined by the root user Note that a call to .BR execve (2) will cause a process's capabilities to be recalculated in the usual way (see -.BR capabilities (7)), -so that usually, -unless it has a user ID of 0 within the namespace or the executable file -has a nonempty inheritable capabilities mask, -it will lose all capabilities. +.BR capabilities (7)). +Consequently, +unless the process has a user ID of 0 within the namespace, +or the executable file has a nonempty inheritable capabilities mask, +the process will lose all capabilities. See the discussion of user and group ID mappings, below. A call to