diff options
| author | Michael Kerrisk <mtk.manpages@gmail.com> | 2018-07-08 10:21:43 +0200 |
|---|---|---|
| committer | Michael Kerrisk <mtk.manpages@gmail.com> | 2018-07-08 10:21:43 +0200 |
| commit | f1081bdc42821d09bc75530efcba196175fa8da0 (patch) | |
| tree | 660d5880c80be56c51af3a6d82724385f81ab8f1 /man7/unix.7 | |
| parent | b66d5714b12ac1252de5546dd8f3d11543f95077 (diff) | |
| download | man-pages-f1081bdc42821d09bc75530efcba196175fa8da0.tar.gz | |
unix.7: Fix a minor imprecision in description of SCM_CREDENTIALS
To spoof credentials requires privilege (i.e., capabilities),
not UID 0.
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
Diffstat (limited to 'man7/unix.7')
| -rw-r--r-- | man7/unix.7 | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/man7/unix.7 b/man7/unix.7 index 0e40885c20..d16cc30a8a 100644 --- a/man7/unix.7 +++ b/man7/unix.7 @@ -400,8 +400,7 @@ header files) in order to obtain the definition of this structure. .IP The credentials which the sender specifies are checked by the kernel. -A process with effective user ID 0 is allowed to specify values that do -not match its own. +A privileged process is allowed to specify values that do not match its own. The sender must specify its own process ID (unless it has the capability .BR CAP_SYS_ADMIN ), its real user ID, effective user ID, or saved set-user-ID (unless it has |