[PATCH 12/16] Manual pages: capsh.1: Update the capsh --decode example
Michael Kerrisk (man-pages)
mtk.manpages at gmail.com
Thu Jul 16 10:18:23 UTC 2020
With the update to the output of /proc/1/status in the previous patch,
the example no longer matches. So, add a different example.
Signed-off-by: Michael Kerrisk (man-pages) <mtk.manpages at gmail.com>
---
doc/capsh.1 | 12 +++++-------
1 file changed, 5 insertions(+), 7 deletions(-)
diff --git a/doc/capsh.1 b/doc/capsh.1
index 916353a..fd6a5ba 100644
--- a/doc/capsh.1
+++ b/doc/capsh.1
@@ -206,15 +206,13 @@ CapAmb: 0000000000000000
.fi
This option provides a quick way to decode a capability vector
-represented in this form. For example, the missing capability from
-this effective set is 0x0100. By running:
+represented in this hexadecimal form.
+Here's an example that decodes the two lowest capability bits:
+.IP
.nf
-
- capsh \-\-decode=0x0100
-
+$ \fBcapsh \-\-decode=3\fP
+0x0000000000000003=cap_chown,cap_dac_override
.fi
-we observe that the missing capability is:
-.BR cap_setpcap .
.TP
.BI \-\-supports= xxx
As the kernel evolves, more capabilities are added. This option can be used
--
2.26.2
More information about the Linux-security-module-archive
mailing list