unshare.2: Add details to CLONE_NEWPID and CLONE_NEWUSER documentation

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man2/unshare.2 b/man2/unshare.2
index eab9679d1921ab27437caed2bdcfa1896ea0a52b..24a0bec03af4c6acec4068779948677aba275f68 100644 (file)
--- a/man2/unshare.2
+++ b/man2/unshare.2
@@ -153,7 +153,7 @@ This flag has the same effect as the
 .B CLONE_NEWPID
 flag.
 Unshare the PID namespace,
-so that the calling process is moved into a new PID namespace
+so that the calling process has a new PID namespace for its children
 which is not shared with any previously existing process.
 Use of
 .BR CLONE_NEWPID
@@ -169,6 +169,11 @@ flag.
 Unshare the user namespace,
 so that the calling process is moved into a new user namespace
 which is not shared with any previously existing process.
+.BR CLONE_NEWUSER
+requires the calling process is not threaded and the user ID and group ID
+of the calling process are mapped user IDs and group IDs in the
+user namespace of the calling process at the time of the call.
+
 .TP
 .BR CLONE_NEWUTS " (since Linux 2.6.19)"
 This flag has the same effect as the