From f4404effa45ce378a8a72f2fff9641c7d7a0cc6f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <cgzones@googlemail.com>
Date: Wed, 2 Sep 2020 14:39:25 +0200
Subject: Add option to drop Linux capabilities

Conflicts with setuid support, but that is commonly not enabled.
---
 htop.1.in | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'htop.1.in')

diff --git a/htop.1.in b/htop.1.in
index cd984789..2ab5c329 100644
--- a/htop.1.in
+++ b/htop.1.in
@@ -63,6 +63,14 @@ requesting a sort order with -s.
 .TP
 \fB\-H \-\-highlight-changes=DELAY\fR
 Highlight new and old processes
+.TP
+\fB   \-\-drop-capabilities[=none|basic|strict]\fR
+Linux only; requires libcap support.
+.br
+Drop unneeded Linux capabilities.
+In strict mode features like killing, changing process priorities, and reading
+process delay accounting information will not work, due to less capabilities
+held.
 .SH "INTERACTIVE COMMANDS"
 The following commands are supported while in
 .BR htop :
-- 
cgit v1.2.3