capabilities.7: Add a detail on use of securebits

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-07-06 10:08:57 +02:00
parent e15805cc91
commit c54fbb8c3d
1 changed files with 1 additions and 0 deletions

View File

@ -1188,6 +1188,7 @@ is by executing a program with associated file capabilities:
.nf
prctl(PR_SET_SECUREBITS,
/* SECBIT_KEEP_CAPS off */
SECBIT_KEEP_CAPS_LOCKED |
SECBIT_NO_SETUID_FIXUP |
SECBIT_NO_SETUID_FIXUP_LOCKED |