pivot_root.2: Note capability requirements

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man2/pivot_root.2 b/man2/pivot_root.2
index d2a111fc1d659a60b240cd0c0b824efdb78ca3e9..d7ca80d4af5375920eafb95cdb03bb734e3f63f7 100644 (file)
--- a/man2/pivot_root.2
+++ b/man2/pivot_root.2
@@ -20,10 +20,9 @@ There is no glibc wrapper for this system call; see NOTES.
 moves the root filesystem of the calling process to the
 directory \fIput_old\fP and makes \fInew_root\fP the new root filesystem
 of the calling process.
-.\"
-.\" The
-.\" .B CAP_SYS_ADMIN
-.\" capability is required.
+The calling process must have the
+.B CAP_SYS_ADMIN
+capability in the user namespace that owns the caller's mount namespace.
 .PP
 The typical use of
 .BR pivot_root ()