[PATCH 1/2] prctl.2: Be more precise in what causes dumpable to reset

[PATCH 1/2] prctl.2: Be more precise in what causes dumpable to reset

[Keno Fischer]

---
 man2/prctl.2 | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/man2/prctl.2 b/man2/prctl.2
index 26ac5d4..4e037e4 100644
--- a/man2/prctl.2
+++ b/man2/prctl.2
@@ -216,7 +216,7 @@ However, it is reset to the current value contained in the file
 in the following circumstances:
 .\" See kernel/cred.c::commit_creds() (Linux 3.18 sources)
 .RS
-.IP * 3
+.IP * 4
 The process's effective user or group ID is changed.
 .IP *
 The process's filesystem user or group ID is changed (see
@@ -224,9 +224,15 @@ The process's filesystem user or group ID is changed (see
 .IP *
 The process executes
 .RB ( execve (2))
-a set-user-ID or set-group-ID program,
-or a program that has capabilities (see
-.BR capabilities (7)).
+a set-user-ID or set-group-ID program, resuling in a change
+of either effective user or group id.
+.IP *
+The process executes
+.RB ( execve (2))
+a program that has file capabilities (see
+.BR capabilities (7)),
+but only if the permitted capabilities
+gained exceed those already permitted for the current process.
 .\" Also certain namespace operations;
 .RE
 .IP
-- 
2.8.1

--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [PATCH 1/2] prctl.2: Be more precise in what causes dumpable to reset

[Michael Kerrisk (man-pages)]

Hello Keno,

On 12/27/2016 10:52 PM, Keno Fischer wrote:
> ---
>  man2/prctl.2 | 14 ++++++++++----
>  1 file changed, 10 insertions(+), 4 deletions(-)


Thanks! Patch applied. One minor comment below.

> diff --git a/man2/prctl.2 b/man2/prctl.2
> index 26ac5d4..4e037e4 100644
> --- a/man2/prctl.2
> +++ b/man2/prctl.2
> @@ -216,7 +216,7 @@ However, it is reset to the current value contained in the file
>  in the following circumstances:
>  .\" See kernel/cred.c::commit_creds() (Linux 3.18 sources)
>  .RS
> -.IP * 3
> +.IP * 4

Best to separate such minor formatting changes into a separate patch.
That said, an indent of 3 is the norm, and I reverted this change.

Cheers,

Michael


>  The process's effective user or group ID is changed.
>  .IP *
>  The process's filesystem user or group ID is changed (see
> @@ -224,9 +224,15 @@ The process's filesystem user or group ID is changed (see
>  .IP *
>  The process executes
>  .RB ( execve (2))
> -a set-user-ID or set-group-ID program,
> -or a program that has capabilities (see
> -.BR capabilities (7)).
> +a set-user-ID or set-group-ID program, resuling in a change
> +of either effective user or group id.
> +.IP *
> +The process executes
> +.RB ( execve (2))
> +a program that has file capabilities (see
> +.BR capabilities (7)),
> +but only if the permitted capabilities
> +gained exceed those already permitted for the current process.
>  .\" Also certain namespace operations;
>  .RE
>  .IP



-- 
Michael Kerrisk
Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/
Linux/UNIX System Programming Training: http://man7.org/training/
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html