LDP
/
man-pages
mirror of https://github.com/mkerrisk/man-pages
0
1
Fork 0
Code Releases Activity

capabilities.7: wfix 

Fix some confusion between "mask" and "extended attribute"

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2018-07-01 11:25:21 +02:00
parent 54254ef33a
commit c281d0505d
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
man7/capabilities.7
View File

@ -944,7 +944,7 @@ then the effective flag must also be specified as enabled
for all other capabilities for which the corresponding permitted or
inheritable flags is enabled.
.\"
.SS File capability mask versioning
.SS File capability extended attribute versioning
To allow extensibility,
the kernel supports a scheme to encode a version number inside the
.I security.capability
@ -988,11 +988,12 @@ there may be some files with version 2 capabilities
while others have version 3 capabilities.
.PP
Before Linux 4.14,
the only kind of capability mask that could be attached to a file was a
the only kind of file capability extended attribute
that could be attached to a file was a
.B VFS_CAP_REVISION_2
mask.
attribute.
Since Linux 4.14,
the version of the capability mask that is attached to a file
the version of the capability extended attribute that is attached to a file
depends on the circumstances in which the
.I security.capability
extended attribute was created.