diff --git a/man7/raw.7 b/man7/raw.7 index 50763c47b..69acfec10 100644 --- a/man7/raw.7 +++ b/man7/raw.7 @@ -30,9 +30,9 @@ socket option is enabled on the socket. When it is enabled, the packet must contain an IP header. For receiving, the IP header is always included in the packet. -Only processes with an effective user ID of 0 or the +In order to create a raw socket, a process must have the .B CAP_NET_RAW -capability are allowed to open raw sockets. +capability in the user namespace that governs its network namespace. All packets or errors matching the .I protocol