aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorCarlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>2024-04-05 16:40:16 -0700
committerAndrew G. Morgan <morgan@kernel.org>2024-04-05 18:16:48 -0700
commit56ee609f672487cdc15b0df6004764bf46552f06 (patch)
treebd244ae3e9017d5bb04120ac36fe26b5f29807e2
parentcaab6200d2420616604c4851b2b3a3065f07b447 (diff)
downloadlibcap-56ee609f672487cdc15b0df6004764bf46552f06.tar.gz
doc: document the use of `*` to refer to all users
Signed-off-by: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
-rw-r--r--doc/capability.conf.52
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/capability.conf.5 b/doc/capability.conf.5
index 10ff63b..15535f4 100644
--- a/doc/capability.conf.5
+++ b/doc/capability.conf.5
@@ -16,7 +16,7 @@ Where \fB<IAB>\fR refers to the text format for an inheritable IAB capability tu
.P
The reserved word \fBall\fR does \fInot\fR grant \fIall the inheritable capabilities\fR, but acts as a simple \fIpass\-through\fR for any prevailing IAB tuple capabilities\. The reserved word \fBnone\fR refers to an empty \fIInheritable\fR capability set (and by extension an empty \fIAmbient\fR vector)\.
.P
-Here \fB<WHO>\fR refers to the space separated PAM username values that will be granted the specified \fIIAB\fR tuple\. A name prefixed with the character \fB@\fR refers to the locally defined \fB/etc/group\fR \fIetc\fR users listed under that group name\.
+Here \fB<WHO>\fR refers to the space separated PAM username values that will be granted the specified \fIIAB\fR tuple\. A name prefixed with the character \fB@\fR refers to the locally defined \fB/etc/group\fR \fIetc\fR users listed under that group name\. An asterisk "\fB*\fR" can be used to denote all users\.
.P
The parsing of the file chooses the first line that applies to the authenticating user, and attempts to apply that and only that\.
.P