man: clarify subid delegation behaviour
Following the discussion https://github.com/shadow-maint/shadow/pull/345 I have changed the documentation to clarify the behaviour of subid delegation when any subid source except files is configured.
This commit is contained in:
parent
a6154b8572
commit
68ebbf9360
@ -87,12 +87,11 @@
|
|||||||
<refsect1 id='description'>
|
<refsect1 id='description'>
|
||||||
<title>DESCRIPTION</title>
|
<title>DESCRIPTION</title>
|
||||||
<para>
|
<para>
|
||||||
The <command>newgidmap</command> sets <filename>/proc/[pid]/gid_map</filename> based on its
|
The <command>newgidmap</command> sets <filename>/proc/[pid]/gid_map</filename>
|
||||||
command line arguments and the gids allowed. The subid delegation can come either from files
|
based on its command line arguments and the gids allowed. Subgid
|
||||||
(<filename>/etc/subgid</filename>) or from the configured NSS subid module. Only one of them
|
delegation can either be managed via <filename>/etc/subgid</filename>
|
||||||
can be chosen at a time. So, for example, if the subid source is configured as NSS and
|
or through the configured NSS subid module. These options are mutually
|
||||||
<command>groupadd</command> is executed, then the command will fail and the entry will not be
|
exclusive.
|
||||||
created in <filename>/etc/subgid</filename>.
|
|
||||||
</para>
|
</para>
|
||||||
|
|
||||||
<para>
|
<para>
|
||||||
|
@ -87,12 +87,11 @@
|
|||||||
<refsect1 id='description'>
|
<refsect1 id='description'>
|
||||||
<title>DESCRIPTION</title>
|
<title>DESCRIPTION</title>
|
||||||
<para>
|
<para>
|
||||||
The <command>newuidmap</command> sets <filename>/proc/[pid]/uid_map</filename> based on its
|
The <command>newuidmap</command> sets <filename>/proc/[pid]/uid_map</filename>
|
||||||
command line arguments and the uids allowed. The subid delegation can come either from files
|
based on its command line arguments and the uids allowed. Subuid
|
||||||
(<filename>/etc/subuid</filename>) or from the configured NSS subid module. Only one of them
|
delegation can either be managed via <filename>/etc/subuid</filename> or
|
||||||
can be chosen at a time. So, for example, if the subid source is configured as NSS and
|
through the configured NSS subid module. These options are mutually
|
||||||
<command>useradd</command> is executed, then the command will fail and the entry will not be
|
exclusive.
|
||||||
created in <filename>/etc/subuid</filename>.
|
|
||||||
</para>
|
</para>
|
||||||
|
|
||||||
<para>
|
<para>
|
||||||
|
Loading…
Reference in New Issue
Block a user