diff options
author | Andrew G. Morgan <morgan@kernel.org> | 2021-11-17 09:21:31 -0800 |
---|---|---|
committer | Andrew G. Morgan <morgan@kernel.org> | 2021-11-17 09:21:31 -0800 |
commit | e0582d0aee30032190222c110d72d7be22c715af (patch) | |
tree | 8bfa9ee8536fbcaa63c79942c5ebca6e5f22e5e4 | |
parent | 9fa2fe739c2eb4960f0417a1e5f8dcccbfd3d49b (diff) | |
download | libcap-e0582d0aee30032190222c110d72d7be22c715af.tar.gz |
Prune the the.
Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
-rw-r--r-- | cap/file.go | 2 | ||||
-rw-r--r-- | cap/iab.go | 2 | ||||
-rw-r--r-- | doc/cap_iab.3 | 4 |
3 files changed, 4 insertions, 4 deletions
diff --git a/cap/file.go b/cap/file.go index 9a5b10c..d92548f 100644 --- a/cap/file.go +++ b/cap/file.go @@ -50,7 +50,7 @@ type vfsCaps3 struct { RootID uint32 } -// ErrBadSize indicates the the loaded file capability has +// ErrBadSize indicates the loaded file capability has // an invalid number of bytes in it. var ErrBadSize = errors.New("filecap bad size") @@ -259,7 +259,7 @@ func (sc *syscaller) iabSetProc(iab *IAB) (err error) { // SetProc attempts to change the Inheritable, Ambient and Bounding // capability vectors of the current process using the content, // iab. The Bounding vector strongly affects the potential for setting -// other bits, so this function carefully performs the the combined +// other bits, so this function carefully performs the combined // operation in the most flexible manner. func (iab *IAB) SetProc() error { if err := iab.good(); err != nil { diff --git a/doc/cap_iab.3 b/doc/cap_iab.3 index 4a55d0b..8bec5fd 100644 --- a/doc/cap_iab.3 +++ b/doc/cap_iab.3 @@ -1,4 +1,4 @@ -.TH CAP_IAB 3 "2021-09-01" "" "Linux Programmer's Manual" +.TH CAP_IAB 3 "2021-11-17" "" "Linux Programmer's Manual" .SH NAME .nf #include <sys/capability.h> @@ -45,7 +45,7 @@ set of rules when the executed file has no configured There are some constraints enforced by the kernel with respect to the three components of an IAB tuple and the Permitted process capability flag. They are: the Inh vector is entirely equal to the process -Inheritable flag at all times; the the Amb vector contains no more +Inheritable flag at all times; the Amb vector contains no more capability values than the intersection of the Inh vector and the Permitted flag for the process; and the Bound (or \fIblocked\fP) vector is the twos-complement of the process bounding vector. |