prctl.2: Be more precise in what causes dumpable to reset
PATCH 1/2 prctl.2: Be more precise in what causes dumpable to reset
--- man2/prctl.2 | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-)
man2/prctl.2 +10 -4
@@ -216,7 +216,7 @@ However, it is reset to the current value contained in the file in the following circumstances: .\" See kernel/cred.c::commit_creds() (Linux 3.18 sources) .RS -.IP * 3 +.IP * 4 The process's effective user or group ID is changed. .IP * The process's filesystem user or group ID is changed (see
@@ -224,9 +224,15 @@ The process's filesystem user or group ID is changed (see .IP * The process executes .RB ( execve (2)) -a set-user-ID or set-group-ID program, -or a program that has capabilities (see -.BR capabilities (7)). +a set-user-ID or set-group-ID program, resuling in a change +of either effective user or group id. +.IP * +The process executes +.RB ( execve (2)) +a program that has file capabilities (see +.BR capabilities (7)), +but only if the permitted capabilities +gained exceed those already permitted for the current process. .\" Also certain namespace operations; .RE .IP
Signature · 6 lines
2.8.1 -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
A message that is not in the archive (sent off-list or not yet received): 20161227215216.GA1211-9DCaDmOhoh+8M3too/[email protected]
Hello Keno,
Quoted 3 lines · Keno Fischer
--- man2/prctl.2 | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-)
Thanks! Patch applied. One minor comment below.
man2/prctl.2 However, it is reset to the current value contained in the file · line 219
Quoted 10 lines
man2/prctl.2 +1
-1@@ -216,7 +216,7 @@ However, it is reset to the current value contained in the file in the following circumstances: .\" See kernel/cred.c::commit_creds() (Linux 3.18 sources) .RS -.IP * 3 +.IP * 4
Best to separate such minor formatting changes into a separate patch. That said, an indent of 3 is the norm, and I reverted this change.
Cheers,
Michael
Quoted 22 lines
man2/prctl.2 +9
-3The process's effective user or group ID is changed. .IP * The process's filesystem user or group ID is changed (see@@ -224,9 +224,15 @@ The process's filesystem user or group ID is changed (see .IP * The process executes .RB ( execve (2)) -a set-user-ID or set-group-ID program, -or a program that has capabilities (see -.BR capabilities (7)). +a set-user-ID or set-group-ID program, resuling in a change +of either effective user or group id. +.IP * +The process executes +.RB ( execve (2)) +a program that has file capabilities (see +.BR capabilities (7)), +but only if the permitted capabilities +gained exceed those already permitted for the current process. .\" Also certain namespace operations; .RE .IP
Signature · 7 lines
Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/ -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html