From: Yu Watanabe Date: Thu, 26 Apr 2018 15:23:49 +0000 (+0900) Subject: man: fix merging rule for CapabilityBoundingSet= X-Git-Tag: v239~210^2 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b086654c6a75119b660235ffb08bb4963835fc7c;p=thirdparty%2Fsystemd.git man: fix merging rule for CapabilityBoundingSet= --- diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index eeac195a39b..f26a0755ece 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -313,7 +313,7 @@ inverted. Note that this option also affects the respective capabilities in the effective, permitted and inheritable capability sets. If this option is not used, the capability bounding set is not modified on process execution, hence no limits on the capabilities of the process are enforced. This option may appear more than - once, in which case the bounding sets are merged by AND, or by OR if + once, in which case the bounding sets are merged by OR, or by AND if the lines are prefixed with ~ (see below). If the empty string is assigned to this option, the bounding set is reset to the empty capability set, and all prior settings have no effect. If set to ~ (without any further argument), the bounding set is reset to the full set of available