capabilities.7: Add a note about using strace on binaries that have capabilities

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man7/capabilities.7 b/man7/capabilities.7
index e9f46487aa65374391ae468450284589d1e8deb3..bdf36c9a407034c5ca0caf030cacb18e31dce3ed 100644 (file)
--- a/man7/capabilities.7
+++ b/man7/capabilities.7
@@ -1671,6 +1671,20 @@ is based on the withdrawn POSIX.1e draft standard; see
 .UR https://archive.org\:/details\:/posix_1003.1e-990310
 .UE .
 .SH NOTES
+When attempting to
+.BR strace (1)
+binaries that have capabilities (or set-user-ID-root binaries),
+you may find the
+.I \-u <username>
+option useful.
+Something like:
+.PP
+.in +4n
+.EX
+$ \fBsudo strace \-o trace.log \-u ceci ./myprivprog\fP
+.EE
+.in
+.PP
 From kernel 2.5.27 to kernel 2.6.26,
 .\" commit 5915eb53861c5776cfec33ca4fcc1fd20d66dd27 removed
 .\" CONFIG_SECURITY_CAPABILITIES