cgroup_namespaces.7: ffix

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-05-07 22:29:03 +02:00
parent 10b547c577
commit bcedc0c23d
1 changed files with 6 additions and 3 deletions

View File

@ -194,9 +194,12 @@ flag).
.IP
In the absence of cgroup namespacing, because the cgroup directory
.IR /cg/1
is owned (and writable) by UID 9000 and process X is also owned
by user ID 9000, then process X would be able to modify the contents
of cgroups files (i.e., change cgroup settings) not only in
is owned (and writable) by UID 9000 and proces
.I X
is also owned by user ID 9000, then process
.I X
would be able to modify the contents of cgroups files
(i.e., change cgroup settings) not only in
.IR /cg/1/2
but also in the ancestor cgroup directory
.IR /cg/1 .