aboutsummaryrefslogtreecommitdiffstats
path: root/man7
diff options
context:
space:
mode:
authorMichael Kerrisk <mtk.manpages@gmail.com>2020-04-21 14:12:47 +0200
committerMichael Kerrisk <mtk.manpages@gmail.com>2020-04-21 14:12:47 +0200
commit314f7c114e351f485e3724fadb5110899201ae5d (patch)
treeb5844888b9d698f8064c969db8a4558ad05ebf3d /man7
parent485b33bf8cf9360d7904debf11952032c14a6c5a (diff)
downloadman-pages-314f7c114e351f485e3724fadb5110899201ae5d.tar.gz
credentials.7: Alert reader that UID/GID changes can affect process capabilities
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
Diffstat (limited to 'man7')
-rw-r--r--man7/credentials.76
1 files changed, 6 insertions, 0 deletions
diff --git a/man7/credentials.7 b/man7/credentials.7
index 85302bde20..3fdfc84508 100644
--- a/man7/credentials.7
+++ b/man7/credentials.7
@@ -282,6 +282,8 @@ when checking resource limits (see
when checking the limit on the number of inotify instances
that the process may create (see
.BR inotify (7)).
+.\"
+.SS Modifying process user and group IDs
.PP
Subject to rules described in the relevant manual pages,
a process can use the following APIs to modify its user and group IDs:
@@ -312,6 +314,10 @@ filesystem user (group) ID.
Changes to a process's effective user or group ID can also affect the
process "dumpable" attribute, as described in
.BR prctl (2).
+.PP
+Changes to process user and group IDs can affect the capabilities
+of the process, as described in
+.BR capabilities (7).
.SH CONFORMING TO
Process IDs, parent process IDs, process group IDs, and session IDs
are specified in POSIX.1.