in the following circumstances:
.\" See kernel/cred.c::commit_creds() (Linux 3.18 sources)
.RS
-.IP * 4
+.IP * 3
The process's effective user or group ID is changed.
.IP *
The process's filesystem user or group ID is changed (see
.IP *
The process executes
.RB ( execve (2))
-a set-user-ID or set-group-ID program, resuling in a change
-of either effective user or group id.
+a set-user-ID or set-group-ID program, resulting in a change
+of either the effective user ID or the effective group ID.
.IP *
The process executes
.RB ( execve (2))
a program that has file capabilities (see
.BR capabilities (7)),
+.\" See kernel/cred.c::commit_creds()
but only if the permitted capabilities
-gained exceed those already permitted for the current process.
+gained exceed those already permitted for the process.
.\" Also certain namespace operations;
.RE
.IP