From: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Date: Wed, 21 Mar 2018 15:07:20 +0000 (+0100)
Subject: man: add a note that nspawn gives access to network by default
X-Git-Tag: v239~477^2~10
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bc96c63c0522dc81c036dcd340369eb04df8d0e9;p=thirdparty%2Fsystemd.git

man: add a note that nspawn gives access to network by default

Fixes #6546.
---

diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml
index 633d9393843..55ef48bfecb 100644
--- a/man/systemd-nspawn.xml
+++ b/man/systemd-nspawn.xml
@@ -519,8 +519,10 @@
         configured with <option>--network-veth</option>. If this
         option is specified, the CAP_NET_ADMIN capability will be
         added to the set of capabilities the container retains. The
-        latter may be disabled by using
-        <option>--drop-capability=</option>.</para></listitem>
+        latter may be disabled by using <option>--drop-capability=</option>.
+        If this option is not specified (or implied by one of the options
+        listed below), the container will have full access to the host network.
+        </para></listitem>
       </varlistentry>
 
       <varlistentry>