capabilities.7: CAP_SYS_ADMIN allows privileged ioctl() operations on /dev/random

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man7/capabilities.7 b/man7/capabilities.7
index f1320e5a319c846522d136f12a14325a913d97c6..db8ffec12212f86b795d8d04ebba8734fa4e3890 100644 (file)
--- a/man7/capabilities.7
+++ b/man7/capabilities.7
@@ -442,6 +442,13 @@ perform various privileged filesystem
 .BR ioctl (2)
 operations;
 .IP *
+perform privileged
+.BR ioctl (2)
+operations on the
+.IR /dev/random
+device (see
+.BR random (4));
+.IP *
 perform administrative operations on many device drivers.
 .RE
 .PD