mirror of https://github.com/mkerrisk/man-pages
user_namespaces.7: wfix: reword a long, difficult to understand sentence
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
0a66259f35
commit
a3969b76b9
|
@ -133,11 +133,11 @@ even if the new namespace is created or joined by the root user
|
||||||
Note that a call to
|
Note that a call to
|
||||||
.BR execve (2)
|
.BR execve (2)
|
||||||
will cause a process's capabilities to be recalculated in the usual way (see
|
will cause a process's capabilities to be recalculated in the usual way (see
|
||||||
.BR capabilities (7)),
|
.BR capabilities (7)).
|
||||||
so that usually,
|
Consequently,
|
||||||
unless it has a user ID of 0 within the namespace or the executable file
|
unless the process has a user ID of 0 within the namespace,
|
||||||
has a nonempty inheritable capabilities mask,
|
or the executable file has a nonempty inheritable capabilities mask,
|
||||||
it will lose all capabilities.
|
the process will lose all capabilities.
|
||||||
See the discussion of user and group ID mappings, below.
|
See the discussion of user and group ID mappings, below.
|
||||||
|
|
||||||
A call to
|
A call to
|
||||||
|
|
Loading…
Reference in New Issue