mirror of https://github.com/mkerrisk/man-pages
capabilities.7, user_namespaces.7: Minor tweaks (part 2) to Kir Kolyshkin's patch
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
c83edb030c
commit
bd62f2240b
|
@ -352,10 +352,10 @@ Set arbitrary capabilities on a file.
|
|||
.IP
|
||||
.\" commit db2e718a47984b9d71ed890eb2ea36ecf150de18
|
||||
Since Linux 5.12, this capability is
|
||||
also needed to map uid 0 (as in
|
||||
.IR "unshare -Ur" ,
|
||||
also needed to map UID 0 (as in
|
||||
.IR "unshare \-Ur" ;
|
||||
see
|
||||
.BR unshare (1).
|
||||
.BR unshare (1)).
|
||||
.TP
|
||||
.B CAP_SETPCAP
|
||||
If file capabilities are supported (i.e., since Linux 2.6.24):
|
||||
|
|
|
@ -578,8 +578,8 @@ The mapped user IDs (group IDs) must in turn have a mapping
|
|||
in the parent user namespace.
|
||||
.IP 4.
|
||||
.\" commit db2e718a47984b9d71ed890eb2ea36ecf150de18
|
||||
If a writing process is root (i.e. UID 0) trying to map host user ID 0,
|
||||
it must have
|
||||
If a writing process is root (i.e., UID 0) trying to map host user ID 0,
|
||||
it must have the
|
||||
.B CAP_SETFCAP
|
||||
capability (since Linux 5.12).
|
||||
.IP 5.
|
||||
|
|
Loading…
Reference in New Issue