user_namespaces.7: wfix: Improve wording in discussion of resetting of 'securebits...

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man7/user_namespaces.7 b/man7/user_namespaces.7
index f79e65f22987cd0542f358b01ed0f32f2ee09622..98adb078d699edbf2d458e8d3c20775f4e07bf04 100644 (file)
--- a/man7/user_namespaces.7
+++ b/man7/user_namespaces.7
@@ -148,13 +148,16 @@ the process will lose all capabilities.
 See the discussion of user and group ID mappings, below.
 .PP
 A call to
-.BR clone (2),
-.BR unshare (2),
+.BR clone (2)
 or
-.BR setns (2)
+.BR unshare (2)
 using the
 .BR CLONE_NEWUSER
-flag sets the "securebits" flags
+flag
+or a call to
+.BR setns (2)
+that moves the caller into a another user namespace
+sets the "securebits" flags
 (see
 .BR capabilities (7))
 to their default values (all flags disabled) in the child (for