From b086654c6a75119b660235ffb08bb4963835fc7c Mon Sep 17 00:00:00 2001 From: Yu Watanabe Date: Fri, 27 Apr 2018 00:23:49 +0900 Subject: [PATCH] man: fix merging rule for CapabilityBoundingSet= --- man/systemd.exec.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index eeac195a39b..f26a0755ece 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -313,7 +313,7 @@ inverted. Note that this option also affects the respective capabilities in the effective, permitted and inheritable capability sets. If this option is not used, the capability bounding set is not modified on process execution, hence no limits on the capabilities of the process are enforced. This option may appear more than - once, in which case the bounding sets are merged by AND, or by OR if + once, in which case the bounding sets are merged by OR, or by AND if the lines are prefixed with ~ (see below). If the empty string is assigned to this option, the bounding set is reset to the empty capability set, and all prior settings have no effect. If set to ~ (without any further argument), the bounding set is reset to the full set of available -- 2.47.3