Linux-man Archive on lore.kernel.org
 help / color / Atom feed
* user_namespaces(7): obsolete comment about system time
@ 2020-05-31 15:26 Léo Stefanesco
  2020-06-09  8:08 ` Michael Kerrisk (man-pages)
  0 siblings, 1 reply; 2+ messages in thread
From: Léo Stefanesco @ 2020-05-31 15:26 UTC (permalink / raw)
  To: mtk.manpages; +Cc: linux-man

Hi,

In the man7.org version of the man page for user_namespaces(7), it reads:

there are many privileged operations that affect resources that are
not associated with any
namespace type, for example, changing the system time (governed by CAP_SYS_TIME)

which is not consistent with time_namespaces(7).

Cheers,
Léo

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: user_namespaces(7): obsolete comment about system time
  2020-05-31 15:26 user_namespaces(7): obsolete comment about system time Léo Stefanesco
@ 2020-06-09  8:08 ` Michael Kerrisk (man-pages)
  0 siblings, 0 replies; 2+ messages in thread
From: Michael Kerrisk (man-pages) @ 2020-06-09  8:08 UTC (permalink / raw)
  To: Léo Stefanesco; +Cc: mtk.manpages, linux-man

Hello Léo

On 5/31/20 5:26 PM, Léo Stefanesco wrote:
> Hi,
> 
> In the man7.org version of the man page for user_namespaces(7), it reads:
> 
>    there are many privileged operations that affect
>    resources that are not associated with any namespace type,
>    for example, changing the system time
>    (governed by CAP_SYS_TIME)
> 
> which is not consistent with time_namespaces(7).

In fact, strictly peaking the text still is correct, even after
the arrival of time namespaces.

Time namespaces virtualize only the boot-time and monotonic clocks,
not the "real time" (i.e., calendar time), which is the time
referred in the passage you quote.

That said, the text is perhaps now a little misleading, and
a little clarification would help. I changed the text to:

    there are many privileged operations that affect
    resources are not associated with any namespace type,
    for example, changing the system **(i.e., calendar)** time 
    (governed by CAP_SYS_TIME)

Thanks for your report!

Michael


-- 
Michael Kerrisk
Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/
Linux/UNIX System Programming Training: http://man7.org/training/

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, back to index

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-05-31 15:26 user_namespaces(7): obsolete comment about system time Léo Stefanesco
2020-06-09  8:08 ` Michael Kerrisk (man-pages)

Linux-man Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/linux-man/0 linux-man/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 linux-man linux-man/ https://lore.kernel.org/linux-man \
		linux-man@vger.kernel.org
	public-inbox-index linux-man

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/org.kernel.vger.linux-man


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git