From: Michael Kerrisk Date: Tue, 27 Oct 2020 10:41:18 +0000 (+0100) Subject: pid_namespaces.7: Update capability requirements for /proc/sys/kernel/ns_last_pid X-Git-Tag: man-pages-5.09~44 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1e516a820b4dfd3e126b048c0c882cc1d555e5ea;p=thirdparty%2Fman-pages.git pid_namespaces.7: Update capability requirements for /proc/sys/kernel/ns_last_pid Since Linux 5.9, CONFIG_CHECKPOINT_RESTORE also allows writing to /proc/sys/kernel/ns_last_pid. Signed-off-by: Michael Kerrisk --- diff --git a/man7/pid_namespaces.7 b/man7/pid_namespaces.7 index 9d893fcf26..62ecd26a53 100644 --- a/man7/pid_namespaces.7 +++ b/man7/pid_namespaces.7 @@ -372,6 +372,8 @@ and when this file is subsequently read it will show that PID. .IP This file is writable by a process that has the .B CAP_SYS_ADMIN +or (since Linux 5.9) +.B CAP_CHECKPOINT_RESTORE capability inside the user namespace that owns the PID namespace. .\" This ability is necessary to support checkpoint restore in user-space This makes it possible to determine the PID that is allocated