diff options
| author | Michael Kerrisk <mtk.manpages@gmail.com> | 2018-07-01 11:25:21 +0200 |
|---|---|---|
| committer | Michael Kerrisk <mtk.manpages@gmail.com> | 2018-07-01 11:42:13 +0200 |
| commit | c281d0505d7405be370d43871f324ce8e4ab4e78 (patch) | |
| tree | 42d78e4cdb8fef5a6bed77434cb44df71691ae80 /man7 | |
| parent | 54254ef33a2f5ebf0c82ee6cc556935ae20aefa4 (diff) | |
| download | man-pages-c281d0505d7405be370d43871f324ce8e4ab4e78.tar.gz | |
capabilities.7: wfix
Fix some confusion between "mask" and "extended attribute"
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
Diffstat (limited to 'man7')
| -rw-r--r-- | man7/capabilities.7 | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/man7/capabilities.7 b/man7/capabilities.7 index a9b3687d02..aa272fb35a 100644 --- a/man7/capabilities.7 +++ b/man7/capabilities.7 @@ -944,7 +944,7 @@ then the effective flag must also be specified as enabled for all other capabilities for which the corresponding permitted or inheritable flags is enabled. .\" -.SS File capability mask versioning +.SS File capability extended attribute versioning To allow extensibility, the kernel supports a scheme to encode a version number inside the .I security.capability @@ -988,11 +988,12 @@ there may be some files with version 2 capabilities while others have version 3 capabilities. .PP Before Linux 4.14, -the only kind of capability mask that could be attached to a file was a +the only kind of file capability extended attribute +that could be attached to a file was a .B VFS_CAP_REVISION_2 -mask. +attribute. Since Linux 4.14, -the version of the capability mask that is attached to a file +the version of the capability extended attribute that is attached to a file depends on the circumstances in which the .I security.capability extended attribute was created. |