mount.2: MS_NOSUID also disables file capabilities

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man2/mount.2 b/man2/mount.2
index aa6558a87cd9f77fd41ac453c4b3df2266302215..672b1d4f8baefbe3947065d4ea6490823ef07c5d 100644 (file)
--- a/man2/mount.2
+++ b/man2/mount.2
@@ -235,8 +235,8 @@ Do not allow programs to be executed from this filesystem.
 .\" users cannot execute files uploaded using ftp or so.)
 .TP
 .B MS_NOSUID
-Do not honor set-user-ID and set-group-ID bits when executing
-programs from this filesystem.
+Do not honor set-user-ID and set-group-ID bits or file capabilities
+when executing programs from this filesystem.
 .\" (This is a security feature to prevent users executing set-user-ID and
 .\" set-group-ID programs from removable disk devices.)
 .TP