aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2016-06-30proc.5: Add references to mount_namespaces(7)Michael Kerrisk1-9/+10
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30umount.2: SEE ALSO: add mount_namespaces(7)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30mount.2: SEE ALSO: s/namespaces(7)/mount_namespaces(7)/Michael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30namespaces.7: Refer to new mount_namespaces(7) for information on mount ↵Michael Kerrisk1-7/+2
namespaces Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30mount_namespaces.7: Minor tweaksMichael Kerrisk1-50/+51
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30mount_namespaces.7: New page describing mount namespacesMichael Kerrisk1-0/+806
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30proc.5: /proc/PID/mountinfo 'propagate_from' always appears with 'master' tagMichael Kerrisk1-0/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30proc.5: Rework /proc/PID/mountinfo text on dominant peer groupsMichael Kerrisk1-8/+12
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30proc.5: ffix + wfixMichael Kerrisk1-7/+11
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-30user_namespaces.7: Correct kernel version where XFS added support for user ↵Michael Kerrisk1-1/+1
namespaces Linux 3.12, not 3.11. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Minor fixes after review by Kees CookMichael Kerrisk1-9/+14
Reviewed-by: Kees Cook <keescook@chromium.org> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: tfixMichael Kerrisk1-1/+1
Reported-by: Jann Horn <jann@thejh.net> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Note that user namespaces can be used to bypass Yama protectionsMichael Kerrisk1-3/+13
Cowrittten-by: Jann Horn <jann@thejh.net> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29user_namespaces.7: SEE ALSO: add ptrace(2)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Update Yama ptrace_scope documentationMichael Kerrisk1-30/+46
Reframe the discussion in terms of PTRACE_MODE_ATTACH checks, and make a few other minor tweaks and additions. Reviewed-by: Jann Horn <jann@thejh.net> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: srcfix: add 2015 copyright notice for mtkMichael Kerrisk1-2/+2
(Yama ptrace_scope text added in 2015.) Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Add an introductory paragraph to the Ptrace access mode checks" ↵Michael Kerrisk1-3/+11
section Reported-by: Eric W. Biederman <ebiederm@xmission.com> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: tfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Relocate text noting that PTRACE_MODE_* constants are kernel-internalMichael Kerrisk1-11/+11
(No content changes.) Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: wfixMichael Kerrisk1-1/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: srcfixMichael Kerrisk1-0/+13
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Describe PTRACE_MODE_NOAUDIT in more detailStephen Smalley1-0/+9
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Further fixes after review from Jann HornMichael Kerrisk1-5/+13
Reported-by: Jann Horn <jann@thejh.net> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Minor improvements to ptrace access mode textMichael Kerrisk1-1/+6
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Various fixes after review by Jann HornMichael Kerrisk1-5/+6
Among other things, Jann pointed out that the commoncap LSM is always invoked, and Kees Cook pointed out the relevant kernel code: === > BTW, can you point me at the piece(s) of kernel code that show that > "commoncap" is always invoked in addition to any other LSM that has > been installed? It's not entirely obvious, but the bottom of security/commoncap.c shows: struct security_hook_list capability_hooks[] = { LSM_HOOK_INIT(capable, cap_capable), ... }; void __init capability_add_hooks(void) { security_add_hooks(capability_hooks, ARRAY_SIZE(capability_hooks)); } And security/security.c shows the initialization order of the LSMs: int __init security_init(void) { pr_info("Security Framework initialized\n"); /* * Load minor LSMs, with the capability module always first. */ capability_add_hooks(); yama_add_hooks(); loadpin_add_hooks(); /* * Load all the remaining security modules. */ do_security_initcalls(); return 0; } === Reported-by: Jann Horn <jann@thejh.net> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29kcmp.2, ptrace.2: tfixMichael Kerrisk2-4/+5
Reported-by: Jann Horn <jann@thejh.net> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Clarify the purpose of mentioning the kernel PTRACE_MODE_* constantsMichael Kerrisk1-0/+11
The "ptrace access mode" text is about user-space-visible behavior, but in order to explain that behavior at what I believe is a sufficient level of detail (e.g., to differentiate the various types of checks that are performed for various system calls and pseudofile accesses), one needs (1) to discuss the MODE flag details as implemented in the kernel, and (2) to have a shorthand way to refer to the various cases from other pages. It's not absolutely necessary to name the flags for (1), but using the flag names is certainly a handy shorthand for (2). Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: ffixMichael Kerrisk1-2/+0
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29kcmp.2: kcmp() is governed by PTRACE_MODE_READ_REALCREDSMichael Kerrisk1-0/+11
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29get_robust_list.2: get_robust_list() is governed by PTRACE_MODE_READ_REALCREDSMichael Kerrisk1-0/+7
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29perf_event_open.2: If pid > 0, the operation is governed by ↵Michael Kerrisk1-0/+8
PTRACE_MODE_READ_REALCREDS Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Note that PTRACE_SEIZE is subject to a ptrace access mode checkMichael Kerrisk1-0/+6
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Rephrase PTRACE_ATTACH permissions in terms of ptrace access mode ↵Michael Kerrisk1-7/+5
check Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29process_vm_readv.2: Rephrase permission rules in terms of a ptrace access ↵Michael Kerrisk1-13/+5
mode check Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: Note /proc/PID/stat fields that are governed by PTRACE_MODE_READ_FSCREDSMichael Kerrisk1-15/+23
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: /proc/PID/fd/* are governed by PTRACE_MODE_READ_FSCREDSMichael Kerrisk1-0/+7
Permission to dereference/readlink /proc/PID/fd/* symlinks is governed by a PTRACE_MODE_READ_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29namespaces.7: /proc/PID/ns/* are governed by PTRACE_MODE_READ_FSCREDSMichael Kerrisk1-0/+7
Permission to dereference/readlink /proc/PID/ns/* symlinks is governed by a PTRACE_MODE_READ_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: /proc/PID/{cwd,exe,root} are governed by PTRACE_MODE_READ_FSCREDSMichael Kerrisk1-0/+21
Permission to dereference/readlink /proc/PID/{cwd,exe,root} is governed by a PTRACE_MODE_READ_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: /proc/PID/{personality,stack,syscall} are governed by ↵Michael Kerrisk1-0/+15
PTRACE_MODE_ATTACH_FSCREDS Permission to access /proc/PID/{personality,stack,syscall} is governed by a PTRACE_MODE_ATTACH_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: /proc/PID/io is governed by PTRACE_MODE_READ_FSCREDSMichael Kerrisk1-0/+5
Permission to access /proc/PID/io is governed by a PTRACE_MODE_READ_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: /proc/PID/timerslack_ns is governed by PTRACE_MODE_ATTACH_FSCREDSMichael Kerrisk1-0/+5
Permission to access /proc/PID/timerslack_ns is governed by a PTRACE_MODE_ATTACH_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: /proc/PID/{auxv,environ,wchan} are governed by PTRACE_MODE_READ_FSCREDSMichael Kerrisk1-0/+15
Permission to access /proc/PID/{auxv,environ,wchan} is governed by a PTRACE_MODE_READ_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29proc.5: Document /proc/PID/{maps,mem,pagemap} access mode checksMichael Kerrisk1-0/+15
Permission to access /proc/PID/{maps,pagemap} is governed by a PTRACE_MODE_READ_FSCREDS ptrace access mode check. Permission to access /proc/PID/mem is governed by a PTRACE_MODE_ATTACH_FSCREDS ptrace access mode check. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-29ptrace.2: Document ptrace access modesMichael Kerrisk1-0/+170
Reviewed-by: Kees Cook <keescook@chromium.org> Reviewed-by: Jann Horn <jann@thejh.net> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-28cgroups.7: ERRORS: add mount(2) EBUSY errorMichael Kerrisk1-0/+9
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-26user_namespaces.7: Correct user namespace rules for mounting /procMichael Kerrisk1-1/+9
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-26user_namespaces.7: CAP_SYS_ADMIN allows mounting cgroup filesystemsMichael Kerrisk1-0/+6
See https://bugzilla.kernel.org/show_bug.cgi?id=120671 Reported-by: Michał Zegan <webczat_200@poczta.onet.pl> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-26user_namespaces.7: Clarify CAP_SYS_ADMIN details for mounting ↵Michael Kerrisk1-2/+3
FS_USERNS_MOUNT filesystems Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-26acct.2, chmod.2, fcntl.2, mmap.2, mprotect.2, rmdir.2, times.2: tfixMichael Kerrisk7-7/+7
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-26ctime.3, error.3, getmntent.3, getnetent_r.3, getrpcent_r.3, getservent_r.3, ↵Michael Kerrisk13-13/+28
pthread_attr_init.3, pthread_getattr_np.3, pthread_tryjoin_np.3, rpc.3, setaliasent.3, setenv.3, unlocked_stdio.3: srcfix: Eliminate some groff warnings Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-26futex.2: Explain how to get equivalent of FUTEX_WAIT with an absolute timeoutMichael Kerrisk1-1/+19
Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-26futex.2: Describe FUTEX_BITSET_MATCH_ANYMichael Kerrisk1-10/+29
Describe FUTEX_BITSET_MATCH_ANY and FUTEX_WAIT and FUTEX_WAKE equivalences. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: Note that at least one bit must be set in mask for BITSET operationsMichael Kerrisk1-2/+4
At least one bit must be set in the 'val3' mask supplied for the FUTEX_WAIT_BITSET and FUTEX_WAKE_BITSET operations. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: ffixMichael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: wfixMichael Kerrisk1-2/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: ffixMichael Kerrisk1-2/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-24futex.2: Clarify clock default and choices for FUTEX_WAITMichael Kerrisk1-2/+8
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-23charmap.5: ffixMarko Myllynen1-11/+11
2016-06-23futex.2: Fix descriptions of various timeoutsMichael Kerrisk1-13/+23
Reported-by: Thomas Gleixner <tglx@linutronix.de> Reported-by: Darren Hart <dvhart@infradead.org> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-23futex.2: Correct an ENOSYS error descriptionMichael Kerrisk1-1/+2
Since Linux 4.5, FUTEX_CLOCK_REALTIME is allowed with with FUTEX_WAIT. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-23futex.2: Remove crufty text about FUTEX_WAIT_BITSET interpretation of timeoutMichael Kerrisk1-10/+0
Since Linux 4.5, FUTEX_WAIT also understands FUTEX_CLOCK_REALTIME. Reported-by: Darren Hart <dvhart@infradead.org> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22termio.7: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22boot.7: Minor SEE ALSO fixesMichael Kerrisk1-3/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22statfs.2: tfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22fmax.3, fmin.3: SEE ALSO: add fdim(3)Michael Kerrisk2-0/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22strtoul.3: SEE ALSO: add a64l(3)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22vhangup.2: wfixMichael Kerrisk1-2/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22chroot.2: SEE ALSO: add pivot_root(2)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22lookup_dcookie.2: ffix / wfixMichael Kerrisk1-1/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22lookup_dcookie.2: SEE ALSO: add oprofile(1)Michael Kerrisk1-0/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-22cacheflush.2: wfixMichael Kerrisk1-2/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21strcat.3: Add a program that shows the performance characteristics of strcat()Michael Kerrisk1-0/+45
In honor of Joel Spolksy's visit to Munich, let's start educating Schlemiel The Painter. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21user_namespaces.7: List the mount operations permitted by CAP_SYS_ADMINMichael Kerrisk1-0/+38
List the mount operations permitted by CAP_SYS_ADMIN in a noninitial userns. See https://bugzilla.kernel.org/show_bug.cgi?id=120671 Reported-by: Michał Zegan <webczat_200@poczta.onet.pl> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21user_namespaces.7: Add a subsection heading for effects of capabilities in ↵Michael Kerrisk1-1/+5
user NS Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21user_namespaces.7: Clarify meaning of privilege in a user namespaceMichael Kerrisk1-3/+18
Having privilege in a user NS only allows privileged operations on resources governed by that user NS. Many privileged operations relate to resources that have no association with any namespace type, and only processes with privilege in the initial user NS can perform those operations. See https://bugzilla.kernel.org/show_bug.cgi?id=120671 Reported-by: Michał Zegan <webczat_200@poczta.onet.pl> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21cgroup_namespaces.7: tfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21user_namespaces.7: SEE ALSO: add cgroup_namespaces(7)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21user_namespaces.7: Describe a concrete example of capability checkingMichael Kerrisk1-0/+9
Add a concrete example of how the kernel checks capabilities in an associated user namespace when a process attempts a privileged operation. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21user_namespaces.7: Minor wording fixMichael Kerrisk1-2/+2
Avoid listing all namespace types in a couple of places, since such a list is subject to bit rot as the number of namespace types grows. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-21user_namespaces.7: wfix: reword a long, difficult to understand sentenceMichael Kerrisk1-5/+5
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20netlink.7: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20netlink.7: Rework version informationMichael Kerrisk1-30/+17
(No changes in technical details.) Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20cgroups.7: wfixMichael Kerrisk1-5/+5
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20kcmp.2: tfixJakub Wilk1-1/+1
Signed-off-by: Jakub Wilk <jwilk@jwilk.net>
2016-06-20unix.7: Update text on socket permissions on other systemsMichael Kerrisk1-1/+1
At least some of the modern BSDs seem to check for write permission on a socket. (I tested OpenBSD 5.9.) On Solaris 10, some light testing suggested that write permission is still not checked on that system. See https://bugzilla.kernel.org/show_bug.cgi?id=120061 (and https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-1999-1402) Reported-by: Carsten Grohmann <carstengrohmann@gmx.de> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Note that umask / permissions have no effect for abstract socketsMichael Kerrisk1-0/+10
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Move some abstract socket details to a separate subsectionMichael Kerrisk1-3/+6
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Move discussion on pathname socket permissions to DESCRIPTIONMichael Kerrisk1-28/+29
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Minor wording fixesMichael Kerrisk1-6/+4
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Note that abstract sockets automatically disappear when FDs are closedMichael Kerrisk1-0/+2
Added after I ran across this question: http://unix.stackexchange.com/questions/216784/does-linux-automatically-clean-up-abstract-domain-sockets Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Minor wording fixMichael Kerrisk1-1/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Clarify ownership and permissions assigned during socket creationMichael Kerrisk1-18/+26
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Expand discussion of socket permissionsMichael Kerrisk1-3/+7
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Enhance statement about changing sockets ownership and permissionsMichael Kerrisk1-1/+6
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: Fix statement about permissions needed to connect to a UNIX doain socketMichael Kerrisk1-1/+2
Read permission is not required (verified by experiment). Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20unix.7: grfixMichael Kerrisk1-2/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20getaddrinfo_a.3: srcfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20getaddrinfo_a.3: srcfixMichael Kerrisk1-1/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20getunwind.2, prctl.2, aio_suspend.3, setenv.3: srcfixMichael Kerrisk4-4/+4
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20remap_file_pages.2, sigaltstack.2, umask.2, wait4.2, basename.3, ↵Michael Kerrisk11-11/+11
canonicalize_file_name.3, dlerror.3, dlopen.3, dlsym.3, sockatmark.3, strtok.3: srcfix Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20cacos.3, cacosh.3, catan.3, catanh.3: srcfixMichael Kerrisk4-4/+4
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-20setns.2: srcfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-15getauxval.3: tfixTobias Stoeckmann1-1/+1
Fix typo. It's supposed to be "its" not "it's" in this context. Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
2016-06-14locale.5: Adjust conformanceMarko Myllynen1-1/+1
Since we now know that glibc does not support all the keywords mentioned in ISO/IEC TR 14652 [1] and in general glibc aims to be conforming to POSIX first and foremost, I think it's best just to drop the reference to ISO/IEC TR 14652 from the man page. 1) http://www.open-std.org/jtc1/SC22/WG20/docs/n972-14652ft.pdf After this I think the locale related man pages are finally as complete as they need to be.
2016-06-14locale.5: Document missing keywords, minor updatesMarko Myllynen1-15/+28
Cross-checked the current locale.5 page against glibc locales and fixed the following issues: - mention define/ifdef/else/endif - mention reorder-sections-{after,end} - mention script - section/section-symbol are not used, only mentioned in the ISO TR - Fix int_currency_symbol -> int_curr_symbol typo - few formatting fixes
2016-06-14charmap.5: Clarify keyword syntaxMarko Myllynen1-10/+10
Updates charmap(5) to match the syntax all the glibc charmap files are using currently.
2016-06-14locale.5, repertoiremap.5: Clarify keyword syntaxMarko Myllynen2-7/+15
All the glibc locale/repertoiremap files use the format described in the patch. The fix is trivial (and adds an example just in case), I presume these were copypasted from charmaps.5 page, all the glibc charmaps use slightly different format for keywords (I'll send a separate patch to address charmaps.5 next).
2016-06-12netlink.7: srcfixMichael Kerrisk1-1/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-12netlink.7: srcfixMichael Kerrisk1-15/+14
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-12netlink.7: tfixMichael Kerrisk1-13/+13
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-12netlink.7: srcfixMichael Kerrisk1-4/+6
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-12netlink.7: Describe netlink socket optionsAndrey Vagin1-0/+75
Cc: Kir Kolyshkin <kir@openvz.org> Cc: Michael Kerrisk <mtk.manpages@gmail.com> Cc: Herbert Xu <herbert@gondor.apana.org.au> Cc: Patrick McHardy <kaber@trash.net> Cc: Christophe Ricard <christophe.ricard@gmail.com> Cc: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: Andrey Vagin <avagin@openvz.org>
2016-06-12localedef.1: Drop --old-style descriptionMarko Myllynen1-3/+0
The glibc upstream decided to drop localedef(1) --old-style option [1] altogether, I think we can do the same with localedef(1), the option hasn't done anything in over 16 years and I doubt anyone uses it. 1) https://sourceware.org/git/?p=glibc.git;a=commit;h=6a54bcda7a2a64e465992a9984785443fd594743
2016-06-11kcmp.2: Minor wording fixMichael Kerrisk1-3/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-11namespaces.7: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-11prctl.2: Refer reader to discussion of /proc/[pid]/timerslack_nsMichael Kerrisk1-0/+6
Under discussion of PR_SET_TIMERSLACK, refer the reader to the /proc/[pid]/timerslack_ns file, documented in proc(5). Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-11proc.5: Document /proc/[pid]/timerslack_nsMichael Kerrisk1-0/+14
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-10feature_test_macros.7: Emphasize that applications should not directly ↵Michael Kerrisk1-4/+8
include <features.h> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-10bdflush.2: ffixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-10malloc_hook.3: glibc 2.24 removes __malloc_initialize_hookMichael Kerrisk1-0/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09ioctl.2: SEE ALSO: add ioctl_fideduperange(2) and ioctl_ficlonerange(2)Michael Kerrisk1-0/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09prctl.2: Some wording improvements in timer slack descriptionMichael Kerrisk1-14/+15
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09regex.3: Minor fix to 'info libc' regex referenceMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09prctl.2: ffixMichael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09prctl.2: wfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09printf.3: Note support in other C libraries for %m and %nMichael Kerrisk1-1/+2
Reported-by: Shawn Landden <shawn@churchofgit.com> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09kcmp.2: Minor fix-upsMichael Kerrisk1-2/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09utf-8: Include RFC 3629 and clarify endianness which is left ambiguousShawn Landden1-2/+4
The endianness is suggested by the order the bytes are displayed, but the text is ambiguous.
2016-06-09kcmp.2: Minor tweaksMichael Kerrisk1-5/+9
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-09kcmp.2: Note about SECURITY_YAMAShawn Landden1-1/+6
2016-06-09ioctl_ficlonerange.2, ioctl_fideduperange.2: srcfix: fix licensingDarrick J. Wong2-16/+28
These are licensed under GPLv2, not VERBATIM. Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
2016-06-09ioctl_ficlonerange.2, ioctl_fideduperange.2: Mention same-filesystem requirementDarrick J. Wong2-0/+2
Mention that FICLONE, FICLONERANGE, and FIDEDUPERANGE all require both files to reside on the same filesystem. Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
2016-06-09memmem.3: Note that memmem() is present on some other systemsMichael Kerrisk1-1/+2
Reported-by: Shawn Landden <shawn@churchofgit.com> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08ioctl_fideduperange.2: Add VERSIONS sectionMichael Kerrisk1-3/+5
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08ioctl_fideduperange.2: Minor tweaksMichael Kerrisk1-21/+18
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08ioctl_fideduperange.2: srcfixMichael Kerrisk1-8/+16
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08man2: New page documenting the FIDEDUPERANGE ioctlDarrick J. Wong1-0/+168
Document the FIDEDUPERANGE ioctl, formerly known as BTRFS_IOC_EXTENT_SAME. Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
2016-06-08ioctl_ficlonerange.2: Add VERSIONS sectionMichael Kerrisk1-5/+7
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08ioctl_ficlonerange.2: Minor tweaksMichael Kerrisk1-18/+20
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08ioctl_ficlonerange.2: srcfixMichael Kerrisk1-9/+16
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08man2: New page documenting FICLONE and FICLONERANGE ioctlsDarrick J. Wong2-0/+125
Document the FICLONE and FICLONERANGE ioctls, formerly known as the BTRFS_IOC_CLONE and BTRFS_IOC_CLONE_RANGE ioctls. Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
2016-06-08add_key.2: Empty payloads are not allowed in user-defined keysMitch Walker1-3/+0
iBoth add_key and the utility "keyctl add" return EINVAL when attempting to add a user key with an empty or NULL payload. The manpage implies that this should be valid. From my reading of the kernel source, this has not been possible since at least linux kernel commit 1da177e4 (2.6.12-rc2 on 2005-04-16). Until kernel commit cf7f601c, security/keys/user_defined.c:user_instantiate returned -EINVAL if datalen <= 0. That commit only moved this behavior to a new user_preparse function, where it remains today in b562e44f (4.5.0 on 2016-03-13). Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08st.4: wfix + srcfixMichael Kerrisk1-2/+4
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08st.4: srcfixMichael Kerrisk1-3/+5
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-08st.4: Update MTMKPART for kernels >= 4.6Kai Mäkisara1-4/+7
Update the description of the MTMKPART operation of MTIOCTOP to match the changes in kernel version 4.6 (commit 8038e6456a3e6f5c4759e0d73c4f9165b90c93e7) Signed-off-by: Kai Mäkisara <kai.makisara@kolumbus.fi>
2016-06-08st.4: Fix description of read() when block is larger than requestKai Mäkisara1-2/+1
Fix the description of read() in variable block mode if the next block is larger than the requested byte count: error is returned (as already documented with ENOMEM; better to complete the change later than never ?-) Signed-off-by: Kai Mäkisara <kai.makisara@kolumbus.fi>
2016-06-08proc.5: tfixJakub Wilk1-2/+2
Signed-off-by: Jakub Wilk <jwilk@jwilk.net>
2016-06-08clone.2, confstr.3, hpsa.4, tcp.7: tfixJakub Wilk4-5/+5
Signed-off-by: Jakub Wilk <jwilk@jwilk.net>
2016-06-06termios.3: spfixJakub Wilk1-1/+1
Signed-off-by: Jakub Wilk <jwilk@jwilk.net>
2016-06-05mount.2: MS_LAZYTIME and MS_RELATIME can be changed on remountMichael Kerrisk1-0/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-05mount.2: Explicitly note that MS_DIRSYNC setting cannot be changed on remountMichael Kerrisk1-0/+4
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-05mount.2: Remove version numbers attached to flags that are modifiable on remountMichael Kerrisk1-11/+7
This information was simply bogus. Mea culpa. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Minor restructuring/rewording in ERRORSMichael Kerrisk1-7/+23
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Document the MS_REC flagMichael Kerrisk1-5/+34
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Document flags used to set propagation typeMichael Kerrisk1-39/+95
Document MS_SHARED, MS_PRIVATE, MS_SLAVE, and MS_UNBINDABLE. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Note kernel version that added MS_MOVEMichael Kerrisk1-1/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Minor tweaksMichael Kerrisk1-2/+5
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Restructure discussion of 'mountflags' into functional groupsMichael Kerrisk1-111/+212
The existing text makes no differentiation between different "classes" of mount flags. However, certain flags such as MS_REMOUNT, MS_BIND, MS_MOVE, etc. determine the general type of operation that mount() performs. Furthermore, the choice of which class of operation to perform is performed in a certain order, and that order is significant if multiple flags are specified. Restructure and extend the text to reflect these details. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Relocate text on multimounting and mount stacking to NOTESMichael Kerrisk1-5/+7
The text was somewhat out of place in its previous location; NOTES is a better location. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Move text describing 'data' argument higher up in pageMichael Kerrisk1-9/+9
In preparation for other reworking. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Update example list of filesystem typesMichael Kerrisk1-2/+2
Put more modern examples in; remove many older examples. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Relocate/demote/rework text on MS_MGC_VALMichael Kerrisk1-9/+14
The use of this constant has not been needed for 15 years now. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-04mount.2: Note the default treatment of ATIME flags during MS_REMOUNTMichael Kerrisk1-0/+14
The behavior changed in Linux 3.17. Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-03mount.2: Since Linux 2.6.26, bind mounts can be made read-onlyMichael Kerrisk1-0/+12
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-03mount.2: wfixMichael Kerrisk1-0/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-03mmap.2: EXAMPLE: for completeness, add munmap() and close() callsMichael Kerrisk1-0/+3
Reported-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-03assert.3: Clarify details of message printed by assert()Michael Kerrisk1-7/+14
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-03assert.3: Minor clean-upsMichael Kerrisk1-5/+9
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-03assert.3: Improved descriptionNikos Mavrogiannopoulos1-14/+15
Removed text referring to text not being helpful to users. Provide the error text instead to allow the reader to determine whether it is helpful. Recommend against using NDEBUG for programs to exhibit deterministic behavior. Moved description ahead of recommendations. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
2016-06-02get_mempolicy.2: Correct rounding to 'maxnodes' (bits, not bytes)Michael Kerrisk1-1/+1
Reported-by: Jörn Engel <joern@purestorage.com> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-02get_mempolicy.2: Fix prototype for get_mempolicy()Michael Kerrisk1-1/+1
In numaif.h, 'add' is typed as 'void *' Reported-by: Jörn Engel <joern@purestorage.com> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-02open.2: wfixMichael Kerrisk1-1/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01quotactl.2: 'dqb_curspace' is in bytes, not blocksMichael Kerrisk1-2/+2
This error appears to have been injected into glibc when copying some headers from BSD. See https://bugs.debian.org/825548 Reported-by: Jacob Willoughby <jacob@spacemonkey.com> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01credentials.7: SEE ALSO: add runuser(1)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01credentials.7: SEE ALSO: add newgrp(1)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01credentials.7: SEE ALSO: add sudo(8)Michael Kerrisk1-1/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01utmp.5: SEE ALSO: add logname(1)Michael Kerrisk1-0/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01namespaces.7: srcfixMichael Kerrisk1-0/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01mkdtemp.3, mktemp.3: SEE ALSO: add mktemp(1)Michael Kerrisk2-0/+2
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-06-01cp1251.7, cp1252.7, iso_8859-1.7, iso_8859-15.7, iso_8859-5.7, koi8-r.7, ↵Marko Myllynen7-0/+7
koi8-u.7: Add some charset references Add some references to related charsets here and there.
2016-06-01charsets.7: tfix: Spell ISO 8859 consistentlyMarko Myllynen1-2/+2
Trivial: spell ISO 8859 consistently (now it's ISO 8859 tree-wide).
2016-06-01console_codes.4, console_ioctl.4, tty.4, vcs.4, charsets.7: Remove ↵Marko Myllynen5-6/+3
console(4) references Hi Michael, 0f9e647 removed the obsolete console(4) page but we still have few references to it. The patch below removes them or converts to refs to concole_ioctl(4) where appropriate.
2016-05-29strcasecmp.3: Minor tweak to strncasecmp() descriptionMichael Kerrisk1-1/+3
Reported-by: Ori Avtalion <ori@avtalion.name> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-29strcasecmp.3: Make details of strncasecmp() comparison clearerMichael Kerrisk1-6/+5
Quoting Ori: The manpage for strncasecmp has a few wording issues that can be improved: 1) In the DESCRIPTION section, "except it compares only the first n bytes of s1" s1 can be shorter than n bytes. Consider adding "(at most)" after "first". For comparison with reference materials, POSIX uses the wording "not more than n bytes", OSX and FreeBSD use "compares at most [...]". 2) In the RETURN VALUE section: "if s1 (or the first n bytes thereof) is found [...] to match [...] s2" This could theoretically be read to suggest that the first n bytes of s1 are compared against the FULL s2, which is not the case. Consider removing the parenthetical altogether (thus, not mentioning 'n' at all). POSIX doesn't mention 'n' in its RETURN VALUE section. 3) The RETURN VALUE section doesn't mention case insensitivity. It's in the DESCRIPTION, but perhaps it should also be in this section. POSIX mentions case-insensitivity in RETURN VALUE. Consider adding "and ignoring case" after "respectively". Reported-by: Ori Avtalion <ori@avtalion.name> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-29wait.2: Since Linux 4.7, __WALL is implied if child being ptracedMichael Kerrisk1-0/+8
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-29wait.2: waitid() now (since Linux 4.7) also supports __WNOTHREAD/__WCLONE/__WALLMichael Kerrisk1-1/+3
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-29recv.2: With pending 0-length datagram read() and recv() with flags == 0 differMichael Kerrisk1-2/+16
Quoting Tom: The statement "With a zero flags argument, recv() is equivalent to read(2)." is not correct. In the case of passing a UDP socket an empty buffer the two calls differ. read(2) will be a noop (as it rightly says in its manpage), but recv(2) will discard the packet. We ran into this in networkd, as we use FIONREAD to determine the buffer size (and allocate the right buffer), so in case someone passed us an empty packet we would end up in a busy loop when we were using read(2). Changing to recv(2) fixed the issue [https://github.com/systemd/systemd/pull/3299]. Reported-by: Tom Gundersen <teg@jklm.no> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-29recv.2: tfixMichael Kerrisk1-1/+1
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-29lirc.4: Minor fixes to Alec's patchMichael Kerrisk1-6/+6
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-26lirc.4: Update after upstreamed lirc.h, bugfixes.Alec Leamas1-6/+25
The lirc.h header has landed in the kernel, and the kernel docs has been updated all of which reflected in this patch. Here is still an open issue with duplicated info in the kernel docs and the manpage. Eventually, this should be addressed but I frankly don't know how. In the meantime, acknowledge the fact that the kernel docs is the ultimate source
2016-05-26open.2: Refer to correct functions in description of O_TMPFILEEric Biggers1-2/+2
Signed-off-by: Eric Biggers <ebiggers3@gmail.com>
2016-05-26fnctl.2: tfix - remove duplicate paragraph in NOTESIustin Pop1-4/+0
This paragraph already appears above, right before the "File Locking" one. Signed-off-by: Iustin Pop <iustin@k1024.org>
2016-05-26umask.2: NOTES: Mention /proc/PID/status 'Umask' fieldMichael Kerrisk1-0/+5
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-26proc.5: Document /proc/PID/status 'Umask' fieldMichael Kerrisk1-0/+5
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-05-21mount.2: Clarify that MS_MOVE ignores remaining bits in 'mountflags'Michael Kerrisk1-3/+7
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>