aboutsummaryrefslogtreecommitdiffstats
path: root/man7/user_namespaces.7
diff options
context:
space:
mode:
Diffstat (limited to 'man7/user_namespaces.7')
-rw-r--r--man7/user_namespaces.710
1 files changed, 5 insertions, 5 deletions
diff --git a/man7/user_namespaces.7 b/man7/user_namespaces.7
index 56a73ec371..07f84028ab 100644
--- a/man7/user_namespaces.7
+++ b/man7/user_namespaces.7
@@ -133,11 +133,11 @@ even if the new namespace is created or joined by the root user
Note that a call to
.BR execve (2)
will cause a process's capabilities to be recalculated in the usual way (see
-.BR capabilities (7)),
-so that usually,
-unless it has a user ID of 0 within the namespace or the executable file
-has a nonempty inheritable capabilities mask,
-it will lose all capabilities.
+.BR capabilities (7)).
+Consequently,
+unless the process has a user ID of 0 within the namespace,
+or the executable file has a nonempty inheritable capabilities mask,
+the process will lose all capabilities.
See the discussion of user and group ID mappings, below.
A call to