From: Michal Clapinski Date: Tue, 7 Jan 2025 13:57:00 +0000 (+0100) Subject: man/man2/setns.2: Add missing info about time ns X-Git-Tag: man-pages-6.10~20 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=48618d7701d55ca9401b259bb4e6200d841df6d0;p=thirdparty%2Fman-pages.git man/man2/setns.2: Add missing info about time ns Only singlethreaded processes can setns into time ns. Link: Signed-off-by: Michal Clapinski Message-ID: <20250107135700.3995936-1-mclapinski@google.com> Signed-off-by: Alejandro Colomar --- diff --git a/man/man2/setns.2 b/man/man2/setns.2 index f32a91bd8..619717b77 100644 --- a/man/man2/setns.2 +++ b/man/man2/setns.2 @@ -237,7 +237,17 @@ Using to change the caller's cgroup namespace does not change the caller's cgroup memberships. .TP -Network, IPC, time, and UTS namespaces +Time namespaces +In order to reassociate itself with a new time namespace, +the caller must have the +.B CAP_SYS_ADMIN +capability both in its own user namespace and in the user namespace +that owns the target namespace. +.IP +A multithreaded process may not change time namespace with +.BR setns (). +.TP +Network, IPC, and UTS namespaces In order to reassociate itself with a new network, IPC, time, or UTS namespace, the caller must have the .B CAP_SYS_ADMIN