namespaces.7: /proc/PID/ns/* are governed by PTRACE_MODE_READ_FSCREDS

Permission to dereference/readlink /proc/PID/ns/* symlinks is
governed by a PTRACE_MODE_READ_FSCREDS ptrace access mode check.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man7/namespaces.7 b/man7/namespaces.7
index a1ad1a14b751548810e967dff70b494ef37d6b1d..5e8f230e199c051ffc5a485724629eaf1dab0f95 100644 (file)
--- a/man7/namespaces.7
+++ b/man7/namespaces.7
@@ -192,6 +192,13 @@ This file is a handle for the user namespace of the process.
 .TP
 .IR /proc/[pid]/ns/uts " (since Linux 3.0)"
 This file is a handle for the UTS namespace of the process.
+.PP
+Permission to dereference or read
+.RB ( readlink (2))
+these symbolic links is governed by a ptrace access mode
+.B PTRACE_MODE_READ_FSCREDS
+check; see
+.BR ptrace (2).
 .\"
 .\" ==================== Cgroup namespaces ====================
 .\"