mirror of https://github.com/mkerrisk/man-pages
capabilities.7: wfix
Fix some confusion between "mask" and "extended attribute" Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
54254ef33a
commit
c281d0505d
|
@ -944,7 +944,7 @@ then the effective flag must also be specified as enabled
|
||||||
for all other capabilities for which the corresponding permitted or
|
for all other capabilities for which the corresponding permitted or
|
||||||
inheritable flags is enabled.
|
inheritable flags is enabled.
|
||||||
.\"
|
.\"
|
||||||
.SS File capability mask versioning
|
.SS File capability extended attribute versioning
|
||||||
To allow extensibility,
|
To allow extensibility,
|
||||||
the kernel supports a scheme to encode a version number inside the
|
the kernel supports a scheme to encode a version number inside the
|
||||||
.I security.capability
|
.I security.capability
|
||||||
|
@ -988,11 +988,12 @@ there may be some files with version 2 capabilities
|
||||||
while others have version 3 capabilities.
|
while others have version 3 capabilities.
|
||||||
.PP
|
.PP
|
||||||
Before Linux 4.14,
|
Before Linux 4.14,
|
||||||
the only kind of capability mask that could be attached to a file was a
|
the only kind of file capability extended attribute
|
||||||
|
that could be attached to a file was a
|
||||||
.B VFS_CAP_REVISION_2
|
.B VFS_CAP_REVISION_2
|
||||||
mask.
|
attribute.
|
||||||
Since Linux 4.14,
|
Since Linux 4.14,
|
||||||
the version of the capability mask that is attached to a file
|
the version of the capability extended attribute that is attached to a file
|
||||||
depends on the circumstances in which the
|
depends on the circumstances in which the
|
||||||
.I security.capability
|
.I security.capability
|
||||||
extended attribute was created.
|
extended attribute was created.
|
||||||
|
|
Loading…
Reference in New Issue