diff options
| author | Michael Kerrisk <mtk.manpages@gmail.com> | 2016-09-12 19:19:14 +0100 |
|---|---|---|
| committer | Michael Kerrisk <mtk.manpages@gmail.com> | 2016-09-12 20:34:22 +0100 |
| commit | f71d1557506af6a772c0659638081af77a76f081 (patch) | |
| tree | 9c7fa4ce9c5134b1f3f3c38562109eb88f3d85b8 | |
| parent | 47c906e5c4df647bda8d93a51268baeabc1496c8 (diff) | |
| download | man-pages-f71d1557506af6a772c0659638081af77a76f081.tar.gz | |
packet.7: Clarify user namespace requirements for CAP_NET_RAW
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
| -rw-r--r-- | man7/packet.7 | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/man7/packet.7 b/man7/packet.7 index 14de5de5fd..d5e41dd9ba 100644 --- a/man7/packet.7 +++ b/man7/packet.7 @@ -50,9 +50,9 @@ then all protocols are received. All incoming packets of that protocol type will be passed to the packet socket before they are passed to the protocols implemented in the kernel. -Only processes with the +In order to create a packet socket, a process must have the .B CAP_NET_RAW -capability may open packet sockets. +capability in the user namespace that governs its network namespace. .B SOCK_RAW packets are passed to and from the device driver without any changes in |