diff options
Diffstat (limited to 'sys-utils/nsenter.1.adoc')
| -rw-r--r-- | sys-utils/nsenter.1.adoc | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/sys-utils/nsenter.1.adoc b/sys-utils/nsenter.1.adoc index c053526..58dd125 100644 --- a/sys-utils/nsenter.1.adoc +++ b/sys-utils/nsenter.1.adoc @@ -97,6 +97,10 @@ Enter the PID namespace. If no file is specified, enter the PID namespace of the *-U*, *--user*[=_file_]:: Enter the user namespace. If no file is specified, enter the user namespace of the target process. If _file_ is specified, enter the user namespace specified by _file_. See also the *--setuid* and *--setgid* options. +*--user-parent*:: +Enter the parent user namespace. Parent user namespace will be acquired from any other enabled namespace. +If combined with *--user* option the parent user namespace will be fetched from the user namespace and replace it. + *-C*, *--cgroup*[=_file_]:: Enter the cgroup namespace. If no file is specified, enter the cgroup namespace of the target process. If _file_ is specified, enter the cgroup namespace specified by _file_. @@ -113,6 +117,9 @@ Set the user ID which will be used in the entered namespace. *nsenter* always sets UID for user namespaces, the default is 0. If the argument "follow" is specified the UID of the target process is used. +*--keep-caps*:: +When the *--user* option is given, ensure that capabilities granted in the user namespace are preserved in the child process. + *--preserve-credentials*:: Don't modify UID and GID when enter user namespace. The default is to drops supplementary groups and sets GID and UID to 0. @@ -134,8 +141,15 @@ Do not fork before exec'ing the specified program. By default, when entering a P *-Z*, *--follow-context*:: Set the SELinux security context used for executing a new process according to already running process specified by *--target* PID. (The util-linux has to be compiled with SELinux support otherwise the option is unavailable.) +*-c*, *--join-cgroup*:: +Add the initiated process to the cgroup of the target process. + include::man-common/help-version.adoc[] +== NOTES + +The *--user-parent* option requires Linux 4.9 or higher, older kernels will raise inappropriate ioctl for device error. + == AUTHORS mailto:biederm@xmission.com[Eric Biederman], |