summaryrefslogtreecommitdiffstats
path: root/man/systemd.nspawn.xml
diff options
context:
space:
mode:
authorafg <afg984@gmail.com>2019-11-29 10:08:05 +0100
committerLennart Poettering <lennart@poettering.net>2019-11-29 14:42:27 +0100
commitc152a2ba54dc77322997e8f5e302518fe4b07e57 (patch)
tree7013dd759d4abc84b24742b3f0dfad064b193506 /man/systemd.nspawn.xml
parentREADME: move logo up, like on brand.systemd.io README (diff)
downloadsystemd-c152a2ba54dc77322997e8f5e302518fe4b07e57.tar.xz
systemd-c152a2ba54dc77322997e8f5e302518fe4b07e57.zip
nspawn: allow Capability=all in systemd.nspawn [EXEC] section
Just like --capability=all is allowed in the systemd-nspawn command line.
Diffstat (limited to 'man/systemd.nspawn.xml')
-rw-r--r--man/systemd.nspawn.xml3
1 files changed, 2 insertions, 1 deletions
diff --git a/man/systemd.nspawn.xml b/man/systemd.nspawn.xml
index 8f5590c73a..11df4623b4 100644
--- a/man/systemd.nspawn.xml
+++ b/man/systemd.nspawn.xml
@@ -189,7 +189,8 @@
<filename>/etc/systemd/nspawn/</filename> and
<filename>/run/system/nspawn/</filename> (see above). On the
other hand, <varname>DropCapability=</varname> takes effect in
- all cases.</para></listitem>
+ all cases. If the special value <literal>all</literal> is passed, all
+ capabilities are retained (or dropped).</para></listitem>
</varlistentry>
<varlistentry>