| Message ID | 20200716101827.162793-11-mtk.manpages@gmail.com (mailing list archive) |
|---|---|
| State | New, archived |
| Headers | show |
| Series | [01/16] Manual pages: getcap.8, getpcaps.8, setcap.8: SEE ALSO: add capabilities(7) | expand |
diff --git a/doc/capsh.1 b/doc/capsh.1 index 522e719..916353a 100644 --- a/doc/capsh.1 +++ b/doc/capsh.1 @@ -198,10 +198,11 @@ This is a convenience feature. If you look at there are some capability related fields of the following form: .nf - CapInh: 0000000000000000 - CapPrm: ffffffffffffffff - CapEff: fffffffffffffeff - CapBnd: ffffffffffffffff +CapInh: 0000000000000000 +CapPrm: 0000003fffffffff +CapEff: 0000003fffffffff +CapBnd: 0000003fffffffff +CapAmb: 0000000000000000 .fi This option provides a quick way to decode a capability vector
The /proc/1/status output shown for --decode=N is bogus (e.g., ffffffffffffffff == 64 capability bits). Furthermore, showing CAP_SETPCAP as missing from CapEff is historical, and ceased to be actual more than 10 years ago. Replace with a more current example, and also add the CapAmb field. This change renders some of the following text obsolete; that will be fixed in the next patch. Signed-off-by: Michael Kerrisk (man-pages) <mtk.manpages@gmail.com> --- doc/capsh.1 | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-)