X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=NEWS;h=df8c785ebd83db2bdb5cef3fbcfe57782bd772dd;hp=6d4852d8042fe9bb74d90c0378da70d2e2f2cba8;hb=439d6dfd12f58d7230bcae06d73b841eb3bc588a;hpb=3943231cfeb3d76dc4ec0b9f845c3f874593a9de diff --git a/NEWS b/NEWS index 6d4852d80..df8c785eb 100644 --- a/NEWS +++ b/NEWS @@ -84,8 +84,8 @@ CHANGES WITH 183: avoiding ugly interleaving of getty output and boot status messages. - * There's now a system-wide CapabalityBoundingSet= option to - globally reduce the set of capabailities for the + * There's now a system-wide CapabilityBoundingSet= option to + globally reduce the set of capabilities for the system. This is useful to drop CAP_SYS_MKNOD, CAP_SYS_RAWIO, CAP_NET_RAW, CAP_SYS_MODULE, CAP_SYS_TIME, CAP_SYS_PTRACE or even CAP_NET_ADMIN system-wide for secure systems.