setns.2: Note capability requirements for changing network, IPC, or UTS namespace

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2018-05-16 23:04:02 +02:00
parent b4e192495b
commit ac79419503
1 changed files with 7 additions and 0 deletions

View File

@ -173,6 +173,13 @@ Using
.BR setns () .BR setns ()
to change the caller's cgroup namespace does not change to change the caller's cgroup namespace does not change
the caller's cgroup memberships. the caller's cgroup memberships.
.TP
Network, IPC, and UTS namespaces
In order to reassociate itself with a new network, IPC, or UTS namespace,
the calling process must have the
.B CAP_SYS_ADMIN
capability both in its own user namespace and in the user namespace
that owns the target namespace.
.SH RETURN VALUE .SH RETURN VALUE
On success, On success,
.BR setns () .BR setns ()