pid_namespaces.7: Correct capability requirements for write to /proc/sys/kernel/ns_la...

CAP_SYS_ADMIN is needed in the user NS that owns the PID NS.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

diff --git a/man7/pid_namespaces.7 b/man7/pid_namespaces.7
index 867939b0f3fb76814f6ca4dd1b6cb90714053600..d7dc9e1dd84d52fd0ac1209cb9538e204c1c254e 100644 (file)
--- a/man7/pid_namespaces.7
+++ b/man7/pid_namespaces.7
@@ -370,7 +370,7 @@ and when this file is subsequently read it will show that PID.
 .IP
 This file is writable by a process that has the
 .B CAP_SYS_ADMIN
-capability inside its user namespace.
+capability inside the user namespace that owns the PID namespace.
 .\" This ability is necessary to support checkpoint restore in user-space
 This makes it possible to determine the PID that is allocated
 to the next process that is created inside this PID namespace.