Document checks performed by newgidmap/newuidmap

	* man/newgidmap.1.xml: Document the checks performed before
	setting the mapping in /proc.
	* man/newuidmap.1.xml: Likewise.

diff --git a/ChangeLog b/ChangeLog
index 74de2e599b4a058fbda626c3f29650d7c531791e..c966957d6a8b6d741a73b7310b424f7eb725bcc2 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>
+
+       * man/newgidmap.1.xml: Document the checks performed before
+       setting the mapping in /proc.
+       * man/newuidmap.1.xml: Likewise.
+
 2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>
 
        * libmisc/idmapping.h: Document what the upper and lower fields

diff --git a/man/newgidmap.1.xml b/man/newgidmap.1.xml
index 725dcd6047a012235063cc54a9142ee627bc06fb..1e1d4ba44899bff8a9b0f139169eb068c29a93c7 100644 (file)
--- a/man/newgidmap.1.xml
+++ b/man/newgidmap.1.xml
@@ -116,6 +116,16 @@
        </varlistentry>
       </variablelist>
     </para>
+
+    <para>
+      <command>newgidmap</command> verifies that the caller is the owner
+      of the process indicated by <option>pid</option> and that for each
+      of the above sets, each of the GIDs in the range [lowergid,
+      lowergid+count] is allowed to the caller according to
+      <filename>/etc/subgid</filename> before setting
+      <filename>/proc/[pid]/gid_map</filename>.
+    </para>
+
   </refsect1>
 
   <refsect1 id='options'>

diff --git a/man/newuidmap.1.xml b/man/newuidmap.1.xml
index 0bb47b2eb17886076beb5529c43bb4d3bb888109..893cd1a91fd6875f08e5d76d0810b4ec2fef6211 100644 (file)
--- a/man/newuidmap.1.xml
+++ b/man/newuidmap.1.xml
@@ -113,6 +113,15 @@
        </varlistentry>
       </variablelist>
     </para>
+
+    <para>
+      <command>newuidmap</command> verifies that the caller is the owner
+      of the process indicated by <option>pid</option> and that for each
+      of the above sets, each of the UIDs in the range [loweruid,
+      loweruid+count] is allowed to the caller according to
+      <filename>/etc/subuid</filename> before setting
+      <filename>/proc/[pid]/uid_map</filename>.
+    </para>
   </refsect1>
 
   <refsect1 id='options'>