diff options
| author | Michael Kerrisk <mtk.manpages@gmail.com> | 2019-07-01 20:44:43 +0200 |
|---|---|---|
| committer | Michael Kerrisk <mtk.manpages@gmail.com> | 2019-07-02 10:09:24 +0200 |
| commit | b8cf6c243594f22eb80908159241519cc2f1524c (patch) | |
| tree | 4e2760fa88834109f552aecb4db92baf459ebe14 /man7 | |
| parent | 89a0bd82833071115669f5cba5ea1943eebefad2 (diff) | |
| download | man-pages-b8cf6c243594f22eb80908159241519cc2f1524c.tar.gz | |
user_namespaces.7: Minor rewordings of recently added text
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
Diffstat (limited to 'man7')
| -rw-r--r-- | man7/user_namespaces.7 | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/man7/user_namespaces.7 b/man7/user_namespaces.7 index 935ef3d000..64506915a3 100644 --- a/man7/user_namespaces.7 +++ b/man7/user_namespaces.7 @@ -869,12 +869,13 @@ that field is displayed as 4294967295 (\-1 as an unsigned integer). .\" .SS Accessing files .PP -In order to determine permissions when an unprivileged process accesses a file -(or other resource such as a System V IPC object), +In order to determine permissions when an unprivileged process accesses a file, the process credentials (UID, GID) and the file credentials are in effect mapped back to what they would be in the initial user namespace and then compared to determine the permissions that the process has on the file. +The same is also of other objects that employ the credentials plus +permissions mask accessibility model, such as System V IPC objects .\" .\" ============================================================ .\" |