1 # SOME DESCRIPTIVE TITLE
2 # Copyright (C) YEAR Free Software Foundation, Inc.
3 # This file is distributed under the same license as the PACKAGE package.
4 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
8 "Project-Id-Version: PACKAGE VERSION\n"
9 "POT-Creation-Date: 2012-05-01 04:21+0900\n"
10 "PO-Revision-Date: 2012-05-01 04:50+0900\n"
11 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
12 "Language-Team: LANGUAGE <LL@li.org>\n"
15 "Content-Type: text/plain; charset=UTF-8\n"
16 "Content-Transfer-Encoding: 8bit\n"
19 #: build/C/man2/acct.2:32 build/C/man5/acct.5:23
25 #: build/C/man2/acct.2:32
31 #: build/C/man2/acct.2:32 build/C/man5/acct.5:23
32 #: build/C/man7/capabilities.7:46 build/C/man2/capget.2:11
33 #: build/C/man7/cpuset.7:24 build/C/man7/credentials.7:25
34 #: build/C/man2/getgid.2:25 build/C/man2/getgroups.2:31
35 #: build/C/man2/getpid.2:23 build/C/man2/getpriority.2:46
36 #: build/C/man2/getresuid.2:27 build/C/man2/getrlimit.2:64
37 #: build/C/man2/getrusage.2:39 build/C/man2/getsid.2:25
38 #: build/C/man2/getuid.2:26 build/C/man2/iopl.2:33
39 #: build/C/man2/ioprio_set.2:25 build/C/man2/ipc.2:26
40 #: build/C/man2/seteuid.2:27 build/C/man2/setfsgid.2:29
41 #: build/C/man2/setfsuid.2:29 build/C/man2/setgid.2:27
42 #: build/C/man2/setpgid.2:46 build/C/man2/setresuid.2:26
43 #: build/C/man2/setreuid.2:43 build/C/man2/setsid.2:29
44 #: build/C/man2/setuid.2:28 build/C/man7/svipc.7:25 build/C/man3/ulimit.3:27
50 #: build/C/man2/acct.2:32 build/C/man5/acct.5:23
51 #: build/C/man7/capabilities.7:46 build/C/man2/capget.2:11
52 #: build/C/man7/cpuset.7:24 build/C/man7/credentials.7:25
53 #: build/C/man2/getgid.2:25 build/C/man2/getgroups.2:31
54 #: build/C/man2/getpid.2:23 build/C/man2/getpriority.2:46
55 #: build/C/man2/getresuid.2:27 build/C/man2/getrlimit.2:64
56 #: build/C/man2/getrusage.2:39 build/C/man2/getsid.2:25
57 #: build/C/man2/getuid.2:26 build/C/man2/iopl.2:33
58 #: build/C/man2/ioprio_set.2:25 build/C/man2/ipc.2:26
59 #: build/C/man2/seteuid.2:27 build/C/man2/setfsgid.2:29
60 #: build/C/man2/setfsuid.2:29 build/C/man2/setgid.2:27
61 #: build/C/man2/setpgid.2:46 build/C/man2/setresuid.2:26
62 #: build/C/man2/setreuid.2:43 build/C/man2/setsid.2:29
63 #: build/C/man2/setuid.2:28 build/C/man7/svipc.7:25 build/C/man3/ulimit.3:27
65 msgid "Linux Programmer's Manual"
66 msgstr "Linux Programmer's Manual"
69 #: build/C/man2/acct.2:33 build/C/man5/acct.5:24
70 #: build/C/man7/capabilities.7:47 build/C/man2/capget.2:12
71 #: build/C/man7/cpuset.7:25 build/C/man7/credentials.7:26
72 #: build/C/man2/getgid.2:26 build/C/man2/getgroups.2:32
73 #: build/C/man2/getpid.2:24 build/C/man2/getpriority.2:47
74 #: build/C/man2/getresuid.2:28 build/C/man2/getrlimit.2:65
75 #: build/C/man2/getrusage.2:40 build/C/man2/getsid.2:26
76 #: build/C/man2/getuid.2:27 build/C/man2/iopl.2:34
77 #: build/C/man2/ioprio_set.2:26 build/C/man2/ipc.2:27
78 #: build/C/man2/seteuid.2:28 build/C/man2/setfsgid.2:30
79 #: build/C/man2/setfsuid.2:30 build/C/man2/setgid.2:28
80 #: build/C/man2/setpgid.2:47 build/C/man2/setresuid.2:27
81 #: build/C/man2/setreuid.2:44 build/C/man2/setsid.2:30
82 #: build/C/man2/setuid.2:29 build/C/man7/svipc.7:26 build/C/man3/ulimit.3:28
88 #: build/C/man2/acct.2:35
89 msgid "acct - switch process accounting on or off"
90 msgstr "acct - プロセス・アカウントのオンとオフを切り換える"
93 #: build/C/man2/acct.2:35 build/C/man5/acct.5:26 build/C/man2/capget.2:14
94 #: build/C/man2/getgid.2:28 build/C/man2/getgroups.2:34
95 #: build/C/man2/getpid.2:26 build/C/man2/getpriority.2:49
96 #: build/C/man2/getresuid.2:30 build/C/man2/getrlimit.2:67
97 #: build/C/man2/getrusage.2:42 build/C/man2/getsid.2:28
98 #: build/C/man2/getuid.2:29 build/C/man2/iopl.2:36
99 #: build/C/man2/ioprio_set.2:28 build/C/man2/ipc.2:29
100 #: build/C/man2/seteuid.2:30 build/C/man2/setfsgid.2:32
101 #: build/C/man2/setfsuid.2:32 build/C/man2/setgid.2:30
102 #: build/C/man2/setpgid.2:49 build/C/man2/setresuid.2:29
103 #: build/C/man2/setreuid.2:46 build/C/man2/setsid.2:32
104 #: build/C/man2/setuid.2:31 build/C/man7/svipc.7:28 build/C/man3/ulimit.3:30
110 #: build/C/man2/acct.2:39
112 msgid "B<#include E<lt>unistd.hE<gt>>\n"
113 msgstr "B<#include E<lt>unistd.hE<gt>>\n"
116 #: build/C/man2/acct.2:41
118 msgid "B<int acct(const char *>I<filename>B<);>\n"
119 msgstr "B<int acct(const char *>I<filename>B<);>\n"
122 #: build/C/man2/acct.2:47 build/C/man2/getgroups.2:48
123 #: build/C/man2/getrlimit.2:84 build/C/man2/getsid.2:36
124 #: build/C/man2/seteuid.2:42 build/C/man2/setpgid.2:69
125 #: build/C/man2/setreuid.2:58
127 "Feature Test Macro Requirements for glibc (see B<feature_test_macros>(7)):"
128 msgstr "glibc 向けの機能検査マクロの要件 (B<feature_test_macros>(7) 参照):"
131 #: build/C/man2/acct.2:51
133 "B<acct>(): _BSD_SOURCE || (_XOPEN_SOURCE && _XOPEN_SOURCE\\ E<lt>\\ 500)"
135 "B<acct>(): _BSD_SOURCE || (_XOPEN_SOURCE && _XOPEN_SOURCE\\ E<lt>\\ 500)"
138 #: build/C/man2/acct.2:51 build/C/man5/acct.5:28
139 #: build/C/man7/capabilities.7:49 build/C/man2/capget.2:20
140 #: build/C/man7/cpuset.7:27 build/C/man7/credentials.7:28
141 #: build/C/man2/getgid.2:36 build/C/man2/getgroups.2:52
142 #: build/C/man2/getpid.2:34 build/C/man2/getpriority.2:57
143 #: build/C/man2/getresuid.2:38 build/C/man2/getrlimit.2:88
144 #: build/C/man2/getrusage.2:48 build/C/man2/getsid.2:49
145 #: build/C/man2/getuid.2:37 build/C/man2/iopl.2:40
146 #: build/C/man2/ioprio_set.2:33 build/C/man2/ipc.2:35
147 #: build/C/man2/seteuid.2:51 build/C/man2/setfsgid.2:37
148 #: build/C/man2/setfsuid.2:37 build/C/man2/setgid.2:36
149 #: build/C/man2/setpgid.2:96 build/C/man2/setresuid.2:37
150 #: build/C/man2/setreuid.2:68 build/C/man2/setsid.2:39
151 #: build/C/man2/setuid.2:37 build/C/man7/svipc.7:36 build/C/man3/ulimit.3:34
157 #: build/C/man2/acct.2:60
159 "The B<acct>() system call enables or disables process accounting. If "
160 "called with the name of an existing file as its argument, accounting is "
161 "turned on, and records for each terminating process are appended to "
162 "I<filename> as it terminates. An argument of NULL causes accounting to be "
165 "B<acct>() システムコールは、プロセス・アカウントの有効・無効を切り替える。 "
166 "既存のファイルの名前を引き数に指定して呼び出されたら、 アカウント (account) "
167 "が有効になり、 終了したプロセスの記録が I<filename> に追記される。 NULL を引"
168 "き数として呼び出されたらアカウントをオフにする。"
171 #: build/C/man2/acct.2:60 build/C/man2/capget.2:152
172 #: build/C/man2/getgroups.2:92 build/C/man2/getpriority.2:105
173 #: build/C/man2/getresuid.2:49 build/C/man2/getrlimit.2:430
174 #: build/C/man2/getrusage.2:180 build/C/man2/getsid.2:57
175 #: build/C/man2/iopl.2:65 build/C/man2/ioprio_set.2:139
176 #: build/C/man2/seteuid.2:65 build/C/man2/setfsgid.2:67
177 #: build/C/man2/setfsuid.2:67 build/C/man2/setgid.2:51
178 #: build/C/man2/setpgid.2:170 build/C/man2/setresuid.2:64
179 #: build/C/man2/setreuid.2:89 build/C/man2/setsid.2:50
180 #: build/C/man2/setuid.2:68 build/C/man3/ulimit.3:67
186 #: build/C/man2/acct.2:65 build/C/man2/capget.2:157
187 #: build/C/man2/getresuid.2:54 build/C/man2/getrusage.2:185
188 #: build/C/man2/iopl.2:70 build/C/man2/seteuid.2:70 build/C/man2/setgid.2:56
189 #: build/C/man2/setresuid.2:69 build/C/man2/setreuid.2:94
190 #: build/C/man2/setuid.2:73
192 "On success, zero is returned. On error, -1 is returned, and I<errno> is set "
195 "成功した場合は 0 が返される。エラーの場合は -1 が返され、 I<errno> が適切に設"
199 #: build/C/man2/acct.2:65 build/C/man2/capget.2:171 build/C/man7/cpuset.7:1099
200 #: build/C/man2/getgid.2:42 build/C/man2/getgroups.2:106
201 #: build/C/man2/getpid.2:42 build/C/man2/getpriority.2:118
202 #: build/C/man2/getresuid.2:54 build/C/man2/getrlimit.2:435
203 #: build/C/man2/getrusage.2:185 build/C/man2/getsid.2:62
204 #: build/C/man2/getuid.2:43 build/C/man2/iopl.2:70
205 #: build/C/man2/ioprio_set.2:159 build/C/man2/seteuid.2:70
206 #: build/C/man2/setgid.2:56 build/C/man2/setpgid.2:191
207 #: build/C/man2/setresuid.2:69 build/C/man2/setreuid.2:94
208 #: build/C/man2/setsid.2:57 build/C/man2/setuid.2:73 build/C/man3/ulimit.3:74
214 #: build/C/man2/acct.2:66 build/C/man7/cpuset.7:1115
215 #: build/C/man7/cpuset.7:1122 build/C/man7/cpuset.7:1128
216 #: build/C/man7/cpuset.7:1136 build/C/man7/cpuset.7:1143
217 #: build/C/man2/getpriority.2:138 build/C/man2/setpgid.2:192
223 #: build/C/man2/acct.2:77
225 "Write permission is denied for the specified file, or search permission is "
226 "denied for one of the directories in the path prefix of I<filename> (see "
227 "also B<path_resolution>(7)), or I<filename> is not a regular file."
229 "指定したファイルへの書き込み許可がなく、書き込みが拒否された。 または "
230 "I<filename> のディレクトリ部分の何れかのディレクトリに検索許可がなく拒否され"
231 "た (B<path_resolution>(7) も参照すること)。 または I<filename> が通常 "
232 "(regular) のファイルでない。"
235 #: build/C/man2/acct.2:77 build/C/man2/capget.2:172 build/C/man7/cpuset.7:1171
236 #: build/C/man2/getgroups.2:107 build/C/man2/getresuid.2:55
237 #: build/C/man2/getrlimit.2:436 build/C/man2/getrusage.2:186
243 #: build/C/man2/acct.2:81
244 msgid "I<filename> points outside your accessible address space."
245 msgstr "アクセスできるアドレス空間の外を I<filename> が指している。"
248 #: build/C/man2/acct.2:81 build/C/man7/cpuset.7:1237
249 #: build/C/man7/cpuset.7:1245
255 #: build/C/man2/acct.2:85
256 msgid "Error writing to the file I<filename>."
257 msgstr "I<filename> への書き込みにエラーが発生した。"
260 #: build/C/man2/acct.2:85
266 #: build/C/man2/acct.2:89
267 msgid "I<filename> is a directory."
268 msgstr "I<filename> がディレクトリである。"
271 #: build/C/man2/acct.2:89
277 #: build/C/man2/acct.2:93
278 msgid "Too many symbolic links were encountered in resolving I<filename>."
279 msgstr "I<filename> の実体にたどり着くまでのシンボリックリンクの数が多すぎる。"
282 #: build/C/man2/acct.2:93 build/C/man7/cpuset.7:1250
283 #: build/C/man7/cpuset.7:1257 build/C/man7/cpuset.7:1262
285 msgid "B<ENAMETOOLONG>"
286 msgstr "B<ENAMETOOLONG>"
289 #: build/C/man2/acct.2:97
290 msgid "I<filename> was too long."
291 msgstr "I<filename> が長すぎる。"
294 #: build/C/man2/acct.2:97
300 #: build/C/man2/acct.2:100
301 msgid "The system limit on the total number of open files has been reached."
302 msgstr "オープンされたファイルの総数がシステム制限に達した。"
305 #: build/C/man2/acct.2:100 build/C/man7/cpuset.7:1274
306 #: build/C/man7/cpuset.7:1279
312 #: build/C/man2/acct.2:103
313 msgid "The specified filename does not exist."
314 msgstr "指定されたファイルが存在しない。"
317 #: build/C/man2/acct.2:103 build/C/man7/cpuset.7:1286
318 #: build/C/man2/getgroups.2:127
324 #: build/C/man2/acct.2:106 build/C/man2/getgroups.2:130
325 msgid "Out of memory."
329 #: build/C/man2/acct.2:106 build/C/man2/iopl.2:75
335 #: build/C/man2/acct.2:112
337 "BSD process accounting has not been enabled when the operating system kernel "
338 "was compiled. The kernel configuration parameter controlling this feature "
339 "is B<CONFIG_BSD_PROCESS_ACCT>."
341 "カーネルをコンパイルした時に BSD プロセス・アカウントが有効になっていない。 "
342 "この機能はカーネルのコンフィグの B<CONFIG_BSD_PROCESS_ACCT> パラメータによっ"
346 #: build/C/man2/acct.2:112 build/C/man7/cpuset.7:1313
352 #: build/C/man2/acct.2:117
354 "A component used as a directory in I<filename> is not in fact a directory."
356 "I<filename> の中でディレクトリして扱われている要素が、 実際はディレクトリでな"
360 #: build/C/man2/acct.2:117 build/C/man2/capget.2:183 build/C/man2/capget.2:188
361 #: build/C/man7/cpuset.7:1318 build/C/man2/getgroups.2:130
362 #: build/C/man2/getpriority.2:150 build/C/man2/getrlimit.2:452
363 #: build/C/man2/getsid.2:63 build/C/man2/iopl.2:78
364 #: build/C/man2/ioprio_set.2:169 build/C/man2/seteuid.2:73
365 #: build/C/man2/setgid.2:57 build/C/man2/setpgid.2:206
366 #: build/C/man2/setresuid.2:77 build/C/man2/setreuid.2:95
367 #: build/C/man2/setsid.2:58 build/C/man2/setuid.2:83 build/C/man3/ulimit.3:75
373 #: build/C/man2/acct.2:123
375 "The calling process has insufficient privilege to enable process "
376 "accounting. On Linux the B<CAP_SYS_PACCT> capability is required."
378 "呼び出したプロセスにはプロセス・アカウントを有効にするのに十分な特権がない。 "
379 "Linux では B<CAP_SYS_PACCT> ケーパビリティ (capability) が必要である。"
382 #: build/C/man2/acct.2:123
388 #: build/C/man2/acct.2:127
389 msgid "I<filename> refers to a file on a read-only file system."
391 "読み込みだけのファイルシステム上のファイルを I<filename> が参照している。"
394 #: build/C/man2/acct.2:127
400 #: build/C/man2/acct.2:130
401 msgid "There are no more free file structures or we ran out of memory."
402 msgstr "使用可能なファイル構造体がないか、メモリが足りない。"
405 #: build/C/man2/acct.2:130 build/C/man5/acct.5:152
406 #: build/C/man7/capabilities.7:1002 build/C/man2/capget.2:210
407 #: build/C/man7/credentials.7:232 build/C/man2/getgid.2:44
408 #: build/C/man2/getgroups.2:133 build/C/man2/getpid.2:44
409 #: build/C/man2/getpriority.2:158 build/C/man2/getresuid.2:66
410 #: build/C/man2/getrlimit.2:473 build/C/man2/getrusage.2:194
411 #: build/C/man2/getsid.2:78 build/C/man2/getuid.2:45 build/C/man2/iopl.2:85
412 #: build/C/man2/ioprio_set.2:186 build/C/man2/ipc.2:46
413 #: build/C/man2/seteuid.2:89 build/C/man2/setfsgid.2:78
414 #: build/C/man2/setfsuid.2:78 build/C/man2/setgid.2:74
415 #: build/C/man2/setpgid.2:225 build/C/man2/setresuid.2:83
416 #: build/C/man2/setreuid.2:111 build/C/man2/setsid.2:64
417 #: build/C/man2/setuid.2:90 build/C/man3/ulimit.3:78
419 msgid "CONFORMING TO"
422 #. SVr4 documents an EBUSY error condition, but no EISDIR or ENOSYS.
423 #. Also AIX and HP-UX document EBUSY (attempt is made
424 #. to enable accounting when it is already enabled), as does Solaris
425 #. (attempt is made to enable accounting using the same file that is
426 #. currently being used).
428 #: build/C/man2/acct.2:137
429 msgid "SVr4, 4.3BSD (but not POSIX)."
430 msgstr "SVr4, 4.3BSD (POSIX ではない)。"
433 #: build/C/man2/acct.2:137 build/C/man5/acct.5:156
434 #: build/C/man7/capabilities.7:1007 build/C/man2/capget.2:212
435 #: build/C/man7/cpuset.7:1340 build/C/man7/credentials.7:238
436 #: build/C/man2/getgid.2:46 build/C/man2/getgroups.2:141
437 #: build/C/man2/getpid.2:46 build/C/man2/getpriority.2:161
438 #: build/C/man2/getresuid.2:69 build/C/man2/getrlimit.2:496
439 #: build/C/man2/getrusage.2:205 build/C/man2/getsid.2:80
440 #: build/C/man2/getuid.2:47 build/C/man2/getuid.2:57 build/C/man2/iopl.2:89
441 #: build/C/man2/ioprio_set.2:188 build/C/man2/ipc.2:50
442 #: build/C/man2/seteuid.2:91 build/C/man2/setfsgid.2:82
443 #: build/C/man2/setfsuid.2:82 build/C/man2/setgid.2:64
444 #: build/C/man2/setpgid.2:247 build/C/man2/setresuid.2:86
445 #: build/C/man2/setreuid.2:117 build/C/man2/setsid.2:66
446 #: build/C/man2/setuid.2:95
452 #: build/C/man2/acct.2:140
454 "No accounting is produced for programs running when a system crash occurs. "
455 "In particular, nonterminating processes are never accounted for."
457 "システムがクラッシュした時に実行中だったプログラムのアカウントは生成されな"
458 "い。 特に、終了しないプログラムがアカウントされることはない。"
461 #: build/C/man2/acct.2:143
463 "The structure of the records written to the accounting file is described in "
466 "アカウント用ファイルに書き込まれるレコードの構造体については B<acct>(5) に説"
470 #: build/C/man2/acct.2:143 build/C/man5/acct.5:173
471 #: build/C/man7/capabilities.7:1055 build/C/man2/capget.2:219
472 #: build/C/man7/cpuset.7:1487 build/C/man7/credentials.7:250
473 #: build/C/man2/getgid.2:62 build/C/man2/getgroups.2:171
474 #: build/C/man2/getpid.2:98 build/C/man2/getpriority.2:223
475 #: build/C/man2/getresuid.2:85 build/C/man2/getrlimit.2:620
476 #: build/C/man2/getrusage.2:245 build/C/man2/getsid.2:83
477 #: build/C/man2/getuid.2:73 build/C/man2/iopl.2:98
478 #: build/C/man2/ioprio_set.2:317 build/C/man2/ipc.2:58
479 #: build/C/man2/seteuid.2:117 build/C/man2/setfsgid.2:110
480 #: build/C/man2/setfsuid.2:110 build/C/man2/setgid.2:76
481 #: build/C/man2/setpgid.2:315 build/C/man2/setresuid.2:106
482 #: build/C/man2/setreuid.2:157 build/C/man2/setsid.2:83
483 #: build/C/man2/setuid.2:118 build/C/man7/svipc.7:320 build/C/man3/ulimit.3:83
489 #: build/C/man2/acct.2:145
494 #: build/C/man2/acct.2:145 build/C/man5/acct.5:178
495 #: build/C/man7/capabilities.7:1076 build/C/man2/capget.2:223
496 #: build/C/man7/cpuset.7:1504 build/C/man7/credentials.7:281
497 #: build/C/man2/getgid.2:67 build/C/man2/getgroups.2:178
498 #: build/C/man2/getpid.2:108 build/C/man2/getpriority.2:231
499 #: build/C/man2/getresuid.2:91 build/C/man2/getrlimit.2:637
500 #: build/C/man2/getrusage.2:252 build/C/man2/getsid.2:87
501 #: build/C/man2/getuid.2:78 build/C/man2/iopl.2:101
502 #: build/C/man2/ioprio_set.2:323 build/C/man2/ipc.2:71
503 #: build/C/man2/seteuid.2:124 build/C/man2/setfsgid.2:115
504 #: build/C/man2/setfsuid.2:115 build/C/man2/setgid.2:82
505 #: build/C/man2/setpgid.2:322 build/C/man2/setresuid.2:115
506 #: build/C/man2/setreuid.2:165 build/C/man2/setsid.2:89
507 #: build/C/man2/setuid.2:125 build/C/man7/svipc.7:334 build/C/man3/ulimit.3:88
513 #: build/C/man2/acct.2:152 build/C/man5/acct.5:185
514 #: build/C/man7/capabilities.7:1083 build/C/man2/capget.2:230
515 #: build/C/man7/cpuset.7:1511 build/C/man7/credentials.7:288
516 #: build/C/man2/getgid.2:74 build/C/man2/getgroups.2:185
517 #: build/C/man2/getpid.2:115 build/C/man2/getpriority.2:238
518 #: build/C/man2/getresuid.2:98 build/C/man2/getrlimit.2:644
519 #: build/C/man2/getrusage.2:259 build/C/man2/getsid.2:94
520 #: build/C/man2/getuid.2:85 build/C/man2/iopl.2:108
521 #: build/C/man2/ioprio_set.2:330 build/C/man2/ipc.2:78
522 #: build/C/man2/seteuid.2:131 build/C/man2/setfsgid.2:122
523 #: build/C/man2/setfsuid.2:122 build/C/man2/setgid.2:89
524 #: build/C/man2/setpgid.2:329 build/C/man2/setresuid.2:122
525 #: build/C/man2/setreuid.2:172 build/C/man2/setsid.2:96
526 #: build/C/man2/setuid.2:132 build/C/man7/svipc.7:341 build/C/man3/ulimit.3:95
528 "This page is part of release 3.40 of the Linux I<man-pages> project. A "
529 "description of the project, and information about reporting bugs, can be "
530 "found at http://www.kernel.org/doc/man-pages/."
532 "この man ページは Linux I<man-pages> プロジェクトのリリース 3.40 の一部\n"
533 "である。プロジェクトの説明とバグ報告に関する情報は\n"
534 "http://www.kernel.org/doc/man-pages/ に書かれている。"
537 #: build/C/man5/acct.5:23
543 #: build/C/man5/acct.5:26
544 msgid "acct - process accounting file"
545 msgstr "acct - プロセス・アカウンティング・ファイル"
548 #: build/C/man5/acct.5:28
549 msgid "B<#include E<lt>sys/acct.hE<gt>>"
550 msgstr "B<#include E<lt>sys/acct.hE<gt>>"
553 #: build/C/man5/acct.5:34
555 "If the kernel is built with the process accounting option enabled "
556 "(B<CONFIG_BSD_PROCESS_ACCT>), then calling B<acct>(2) starts process "
557 "accounting, for example:"
559 "カーネルがプロセス・アカウンティングのオプション "
560 "(B<CONFIG_BSD_PROCESS_ACCT>) を有効にして作成されていると、以下のように "
561 "B<acct>(2) を呼び出すとプロセス・アカウンティングが開始される。"
564 #: build/C/man5/acct.5:37
565 msgid "acct(\"/var/log/pacct\");"
566 msgstr "acct(\"/var/log/pacct\");"
569 #: build/C/man5/acct.5:45
571 "When process accounting is enabled, the kernel writes a record to the "
572 "accounting file as each process on the system terminates. This record "
573 "contains information about the terminated process, and is defined in "
574 "I<E<lt>sys/acct.hE<gt>> as follows:"
576 "プロセス・アカウンティングが有効になっていると、カーネルは システム上の各プロ"
577 "セスが終了するたびにアカウンティングファイルに レコードを書き込む。 このレ"
578 "コードは、終了したプロセスに関する情報を保持するもので、 I<E<lt>sys/acct."
579 "hE<gt>> で以下のように定義されている。"
582 #: build/C/man5/acct.5:49
584 msgid "#define ACCT_COMM 16\n"
585 msgstr "#define ACCT_COMM 16\n"
588 #: build/C/man5/acct.5:51
590 msgid "typedef u_int16_t comp_t;\n"
591 msgstr "typedef u_int16_t comp_t;\n"
594 #: build/C/man5/acct.5:75
598 " char ac_flag; /* Accounting flags */\n"
599 " u_int16_t ac_uid; /* Accounting user ID */\n"
600 " u_int16_t ac_gid; /* Accounting group ID */\n"
601 " u_int16_t ac_tty; /* Controlling terminal */\n"
602 " u_int32_t ac_btime; /* Process creation time\n"
603 " (seconds since the Epoch) */\n"
604 " comp_t ac_utime; /* User CPU time */\n"
605 " comp_t ac_stime; /* System CPU time */\n"
606 " comp_t ac_etime; /* Elapsed time */\n"
607 " comp_t ac_mem; /* Average memory usage (kB) */\n"
608 " comp_t ac_io; /* Characters transferred (unused) */\n"
609 " comp_t ac_rw; /* Blocks read or written (unused) */\n"
610 " comp_t ac_minflt; /* Minor page faults */\n"
611 " comp_t ac_majflt; /* Major page faults */\n"
612 " comp_t ac_swaps; /* Number of swaps (unused) */\n"
613 " u_int32_t ac_exitcode; /* Process termination status\n"
614 " (see wait(2)) */\n"
615 " char ac_comm[ACCT_COMM+1];\n"
616 " /* Command name (basename of last\n"
617 " executed command; null-terminated) */\n"
618 " char ac_pad[I<X>]; /* padding bytes */\n"
622 " char ac_flag; /* Accounting flags */\n"
623 " u_int16_t ac_uid; /* Accounting user ID */\n"
624 " u_int16_t ac_gid; /* Accounting group ID */\n"
625 " u_int16_t ac_tty; /* Controlling terminal */\n"
626 " u_int32_t ac_btime; /* Process creation time\n"
627 " (seconds since the Epoch) */\n"
628 " comp_t ac_utime; /* User CPU time */\n"
629 " comp_t ac_stime; /* System CPU time */\n"
630 " comp_t ac_etime; /* Elapsed time */\n"
631 " comp_t ac_mem; /* Average memory usage (kB) */\n"
632 " comp_t ac_io; /* Characters transferred (unused) */\n"
633 " comp_t ac_rw; /* Blocks read or written (unused) */\n"
634 " comp_t ac_minflt; /* Minor page faults */\n"
635 " comp_t ac_majflt; /* Major page faults */\n"
636 " comp_t ac_swaps; /* Number of swaps (unused) */\n"
637 " u_int32_t ac_exitcode; /* Process termination status\n"
638 " (see wait(2)) */\n"
639 " char ac_comm[ACCT_COMM+1];\n"
640 " /* Command name (basename of last\n"
641 " executed command; null-terminated) */\n"
642 " char ac_pad[I<X>]; /* padding bytes */\n"
646 #: build/C/man5/acct.5:82
649 "enum { /* Bits that may be set in ac_flag field */\n"
650 " AFORK = 0x01, /* Has executed fork, but no exec */\n"
651 " ASU = 0x02, /* Used superuser privileges */\n"
652 " ACORE = 0x08, /* Dumped core */\n"
653 " AXSIG = 0x10 /* Killed by a signal */\n"
656 "enum { /* Bits that may be set in ac_flag field */\n"
657 " AFORK = 0x01, /* Has executed fork, but no exec */\n"
658 " ASU = 0x02, /* Used superuser privileges */\n"
659 " ACORE = 0x08, /* Dumped core */\n"
660 " AXSIG = 0x10 /* Killed by a signal */\n"
664 #: build/C/man5/acct.5:92
666 "The I<comp_t> data type is a floating-point value consisting of a 3-bit, "
667 "base-8 exponent, and a 13-bit mantissa. A value, I<c>, of this type can be "
668 "converted to a (long) integer as follows:"
670 "データ型 I<comp_t> は浮動小数点値で、3 ビット幅の基数が 8 の指数部と 13 ビッ"
671 "ト幅の仮数部から 構成される。 I<comp_t> 型の値 I<c> は以下のようにして (long "
675 #: build/C/man5/acct.5:95
677 msgid " v = (c & 0x1fff) E<lt>E<lt> (((c E<gt>E<gt> 13) & 0x7) * 3);\n"
678 msgstr " v = (c & 0x1fff) E<lt>E<lt> (((c E<gt>E<gt> 13) & 0x7) * 3);\n"
681 #: build/C/man5/acct.5:105
683 "The I<ac_utime>, I<ac_stime>, and I<ac_etime> fields measure time in \"clock "
684 "ticks\"; divide these values by I<sysconf(_SC_CLK_TCK)> to convert them to "
687 "フィールド I<ac_utime>, I<ac_stime>, I<ac_etime> は \"clock ticks\" 単位で計"
688 "測した時間である。 これらの値を I<sysconf(_SC_CLK_TCK)> で割ると、秒に変換で"
692 #: build/C/man5/acct.5:105
694 msgid "Version 3 Accounting File Format"
695 msgstr "バージョン 3 のアカウンティングファイルのフォーマット"
698 #: build/C/man5/acct.5:120
700 "Since kernel 2.6.8, an optional alternative version of the accounting file "
701 "can be produced if the B<CONFIG_BSD_PROCESS_ACCT_V3> option is set when "
702 "building the kernel. With this option is set, the records written to the "
703 "accounting file contain additional fields, and the width of I<c_uid> and "
704 "I<ac_gid> fields is widened from 16 to 32 bits (in line with the increased "
705 "size of UID and GIDs in Linux 2.4 and later). The records are defined as "
708 "カーネル 2.6.8 以降では、 別のバージョンのアカウンティングファイルを生成する"
709 "ことができ、 これを使うにはカーネル構築時に B<CONFIG_BSD_PROCESS_ACCT_V3> オ"
710 "プションが有効になっている必要がある。 このオプションが設定されると、アカウン"
711 "ティングファイルに書き込まれる レコードにフィールドが追加される。 また、"
712 "フィールド I<c_uid> と I<ac_gid> の幅が 16 ビットから 32 ビットに拡張される "
713 "(これは Linux 2.4 以降で UID と GID のサイズが増えているのに 対応したものであ"
714 "る)。 このレコードは以下のように定義されている。"
717 #: build/C/man5/acct.5:145
721 " char ac_flag; /* Flags */\n"
722 " char ac_version; /* Always set to ACCT_VERSION (3) */\n"
723 " u_int16_t ac_tty; /* Controlling terminal */\n"
724 " u_int32_t ac_exitcode; /* Process termination status */\n"
725 " u_int32_t ac_uid; /* Real user ID */\n"
726 " u_int32_t ac_gid; /* Real group ID */\n"
727 " u_int32_t ac_pid; /* Process ID */\n"
728 " u_int32_t ac_ppid; /* Parent process ID */\n"
729 " u_int32_t ac_btime; /* Process creation time */\n"
730 " float ac_etime; /* Elapsed time */\n"
731 " comp_t ac_utime; /* User CPU time */\n"
732 " comp_t ac_stime; /* System time */\n"
733 " comp_t ac_mem; /* Average memory usage (kB) */\n"
734 " comp_t ac_io; /* Characters transferred (unused) */\n"
735 " comp_t ac_rw; /* Blocks read or written\n"
737 " comp_t ac_minflt; /* Minor page faults */\n"
738 " comp_t ac_majflt; /* Major page faults */\n"
739 " comp_t ac_swaps; /* Number of swaps (unused) */\n"
740 " char ac_comm[ACCT_COMM]; /* Command name */\n"
744 " char ac_flag; /* Flags */\n"
745 " char ac_version; /* Always set to ACCT_VERSION (3) */\n"
746 " u_int16_t ac_tty; /* Controlling terminal */\n"
747 " u_int32_t ac_exitcode; /* Process termination status */\n"
748 " u_int32_t ac_uid; /* Real user ID */\n"
749 " u_int32_t ac_gid; /* Real group ID */\n"
750 " u_int32_t ac_pid; /* Process ID */\n"
751 " u_int32_t ac_ppid; /* Parent process ID */\n"
752 " u_int32_t ac_btime; /* Process creation time */\n"
753 " float ac_etime; /* Elapsed time */\n"
754 " comp_t ac_utime; /* User CPU time */\n"
755 " comp_t ac_stime; /* System time */\n"
756 " comp_t ac_mem; /* Average memory usage (kB) */\n"
757 " comp_t ac_io; /* Characters transferred (unused) */\n"
758 " comp_t ac_rw; /* Blocks read or written\n"
760 " comp_t ac_minflt; /* Minor page faults */\n"
761 " comp_t ac_majflt; /* Major page faults */\n"
762 " comp_t ac_swaps; /* Number of swaps (unused) */\n"
763 " char ac_comm[ACCT_COMM]; /* Command name */\n"
767 #: build/C/man5/acct.5:148 build/C/man7/cpuset.7:1337
768 #: build/C/man2/getresuid.2:59 build/C/man2/getrlimit.2:468
769 #: build/C/man2/getsid.2:74 build/C/man2/ioprio_set.2:183
770 #: build/C/man2/setfsgid.2:74 build/C/man2/setfsuid.2:74
771 #: build/C/man2/setresuid.2:81
777 #: build/C/man5/acct.5:152
778 msgid "The I<acct_v3> structure is defined in glibc since version 2.6."
779 msgstr "I<acct_v3> 構造体はバージョン 2.6 以降の glibc で定義されている。"
782 #: build/C/man5/acct.5:156
784 "Process accounting originated on BSD. Although it is present on most "
785 "systems, it is not standardized, and the details vary somewhat between "
788 "プロセスアカウンティングは BSD 由来である。 この機能はほとんどのシステムに存"
789 "在するが、標準化されておらず、 その詳細はシステムによりいくらか異なる。"
792 #: build/C/man5/acct.5:159
794 "Records in the accounting file are ordered by termination time of the "
796 msgstr "アカウンティングファイルのレコードは、プロセスの終了時刻の順序となる。"
799 #: build/C/man5/acct.5:166
801 "In kernels up to and including 2.6.9, a separate accounting record is "
802 "written for each thread created using the NPTL threading library; since "
803 "Linux 2.6.10, a single accounting record is written for the entire process "
804 "on termination of the last thread in the process."
806 "バージョン 2.6.9 以前のカーネルでは、 NPTL スレッドライブラリを使って作成され"
807 "たスレッドでは スレッド毎に別々のアカウンティングレコードが書き込まれてい"
808 "た。 Linux 2.6.10 以降では、プロセス内の最後のスレッドが終了すると、 プロセス"
809 "全体についてのアカウンティングレコードが一つだけ書き込まれる。"
812 #: build/C/man5/acct.5:173
814 "The I<proc/sys/kernel/acct> file, described in B<proc>(5), defines settings "
815 "that control the behavior of process accounting when disk space runs low."
817 "I<proc/sys/kernel/acct> ファイル (B<proc>(5) で説明されている) は、ディスク"
818 "容量の残りが少なくなった際の プロセス・アカウンティングの動作を制御する設定を"
822 #: build/C/man5/acct.5:178
823 msgid "B<lastcomm>(1), B<acct>(2), B<accton>(8), B<sa>(8)"
824 msgstr "B<lastcomm>(1), B<acct>(2), B<accton>(8), B<sa>(8)"
827 #: build/C/man7/capabilities.7:46
830 msgstr "CAPABILITIES"
833 #: build/C/man7/capabilities.7:46
839 #: build/C/man7/capabilities.7:49
840 msgid "capabilities - overview of Linux capabilities"
841 msgstr "capabilities - Linux のケーパビリティ (capability) の概要"
844 #: build/C/man7/capabilities.7:61
846 "For the purpose of performing permission checks, traditional UNIX "
847 "implementations distinguish two categories of processes: I<privileged> "
848 "processes (whose effective user ID is 0, referred to as superuser or root), "
849 "and I<unprivileged> processes (whose effective UID is nonzero). Privileged "
850 "processes bypass all kernel permission checks, while unprivileged processes "
851 "are subject to full permission checking based on the process's credentials "
852 "(usually: effective UID, effective GID, and supplementary group list)."
854 "権限のチェックを行う観点から見ると、伝統的な UNIX の実装では プロセスは二つの"
855 "カテゴリに分類できる: I<特権> プロセス (実効ユーザID が 0 のプロセス。ユーザ"
856 "ID 0 は スーパーユーザや root と呼ばれる) と I<非特権> プロセス (実効ユーザ"
857 "ID が 0 以外のプロセス) である。 非特権プロセスでは、プロセスの資格情報 (通常"
858 "は、実効UID 、実効GID と追加のグループリスト) に基づく権限チェックが行われる"
859 "のに対し、 特権プロセスでは全てのカーネルの権限チェックがバイパスされる。"
862 #: build/C/man7/capabilities.7:68
864 "Starting with kernel 2.2, Linux divides the privileges traditionally "
865 "associated with superuser into distinct units, known as I<capabilities>, "
866 "which can be independently enabled and disabled. Capabilities are a per-"
869 "バージョン 2.2 以降の Linux では、 これまでスーパーユーザに結び付けられてきた"
870 "権限を、 いくつかのグループに分割している。これらのグループは I<ケーパビリ"
871 "ティ>(capability) と呼ばれ、グループ毎に独立に有効、無効を設定できる。 ケー"
872 "パビリティはスレッド単位の属性である。"
875 #: build/C/man7/capabilities.7:68
877 msgid "Capabilities List"
881 #: build/C/man7/capabilities.7:71
883 "The following list shows the capabilities implemented on Linux, and the "
884 "operations or behaviors that each capability permits:"
886 "以下のリストは、 Linux で実装されているケーパビリティと 各ケーパビリティが許"
887 "可する操作と動作をまとめたものである。"
890 #: build/C/man7/capabilities.7:71
892 msgid "B<CAP_AUDIT_CONTROL> (since Linux 2.6.11)"
893 msgstr "B<CAP_AUDIT_CONTROL> (Linux 2.6.11 以降)"
896 #: build/C/man7/capabilities.7:75
898 "Enable and disable kernel auditing; change auditing filter rules; retrieve "
899 "auditing status and filtering rules."
901 "カーネル監査 (audit) の有効無効の切り替え、 監査のフィルタルールの変更、 監査"
902 "の状況やフィルタルールの取得ができる。"
905 #: build/C/man7/capabilities.7:75
907 msgid "B<CAP_AUDIT_WRITE> (since Linux 2.6.11)"
908 msgstr "B<CAP_AUDIT_WRITE> (Linux 2.6.11 以降)"
911 #: build/C/man7/capabilities.7:78
912 msgid "Write records to kernel auditing log."
913 msgstr "カーネル監査のログにレコードを書き込む。"
916 #: build/C/man7/capabilities.7:78
919 msgstr "B<CAP_CHOWN>"
922 #: build/C/man7/capabilities.7:82
923 msgid "Make arbitrary changes to file UIDs and GIDs (see B<chown>(2))."
924 msgstr "ファイルの UID とGID を任意に変更する (B<chown>(2) 参照)。"
927 #: build/C/man7/capabilities.7:82
929 msgid "B<CAP_DAC_OVERRIDE>"
930 msgstr "B<CAP_DAC_OVERRIDE>"
933 #: build/C/man7/capabilities.7:86
935 "Bypass file read, write, and execute permission checks. (DAC is an "
936 "abbreviation of \"discretionary access control\".)"
938 "ファイルの読み出し、書き込み、実行の権限チェックをバイパスする (DAC は "
939 "\"discretionary access control (任意のアクセス制御)\" の略である)。"
942 #: build/C/man7/capabilities.7:86
944 msgid "B<CAP_DAC_READ_SEARCH>"
945 msgstr "B<CAP_DAC_READ_SEARCH>"
948 #: build/C/man7/capabilities.7:90
950 "Bypass file read permission checks and directory read and execute permission "
953 "ファイルの読み出し権限のチェックとディレクトリの読み出しと実行 の権限チェック"
957 #: build/C/man7/capabilities.7:90
959 msgid "B<CAP_FOWNER>"
960 msgstr "B<CAP_FOWNER>"
963 #: build/C/man7/capabilities.7:94 build/C/man7/capabilities.7:104
964 #: build/C/man7/capabilities.7:108 build/C/man7/capabilities.7:110
965 #: build/C/man7/capabilities.7:112 build/C/man7/capabilities.7:182
966 #: build/C/man7/capabilities.7:184 build/C/man7/capabilities.7:186
967 #: build/C/man7/capabilities.7:188 build/C/man7/capabilities.7:190
968 #: build/C/man7/capabilities.7:192 build/C/man7/capabilities.7:194
969 #: build/C/man7/capabilities.7:196 build/C/man7/capabilities.7:198
970 #: build/C/man7/capabilities.7:222 build/C/man7/capabilities.7:224
971 #: build/C/man7/capabilities.7:270 build/C/man7/capabilities.7:280
972 #: build/C/man7/capabilities.7:286 build/C/man7/capabilities.7:291
973 #: build/C/man7/capabilities.7:297 build/C/man7/capabilities.7:304
974 #: build/C/man7/capabilities.7:307 build/C/man7/capabilities.7:315
975 #: build/C/man7/capabilities.7:317 build/C/man7/capabilities.7:326
976 #: build/C/man7/capabilities.7:333 build/C/man7/capabilities.7:336
977 #: build/C/man7/capabilities.7:340 build/C/man7/capabilities.7:343
978 #: build/C/man7/capabilities.7:346 build/C/man7/capabilities.7:353
979 #: build/C/man7/capabilities.7:358 build/C/man7/capabilities.7:364
980 #: build/C/man7/capabilities.7:368 build/C/man7/capabilities.7:372
981 #: build/C/man7/capabilities.7:376 build/C/man7/capabilities.7:380
982 #: build/C/man7/capabilities.7:407 build/C/man7/capabilities.7:412
983 #: build/C/man7/capabilities.7:417 build/C/man7/capabilities.7:420
984 #: build/C/man7/capabilities.7:423 build/C/man7/capabilities.7:432
985 #: build/C/man7/capabilities.7:436 build/C/man7/capabilities.7:472
986 #: build/C/man7/capabilities.7:474 build/C/man7/capabilities.7:478
987 #: build/C/man7/capabilities.7:480 build/C/man7/capabilities.7:483
988 #: build/C/man7/capabilities.7:487 build/C/man7/capabilities.7:489
989 #: build/C/man7/capabilities.7:491 build/C/man7/capabilities.7:493
990 #: build/C/man7/capabilities.7:502 build/C/man7/capabilities.7:509
991 #: build/C/man7/capabilities.7:514 build/C/man7/capabilities.7:519
992 #: build/C/man7/capabilities.7:729 build/C/man7/capabilities.7:737
993 #: build/C/man7/capabilities.7:1044 build/C/man7/capabilities.7:1049
994 #: build/C/man7/cpuset.7:539 build/C/man7/cpuset.7:544
995 #: build/C/man7/cpuset.7:549 build/C/man7/cpuset.7:725
996 #: build/C/man7/cpuset.7:729 build/C/man7/cpuset.7:926
997 #: build/C/man7/cpuset.7:929 build/C/man7/cpuset.7:933
998 #: build/C/man7/cpuset.7:937 build/C/man7/cpuset.7:941
999 #: build/C/man7/credentials.7:123 build/C/man7/credentials.7:129
1000 #: build/C/man7/credentials.7:141 build/C/man7/credentials.7:163
1001 #: build/C/man7/credentials.7:180 build/C/man7/credentials.7:212
1002 #: build/C/man7/credentials.7:215 build/C/man7/credentials.7:225
1003 #: build/C/man7/credentials.7:228
1009 #: build/C/man7/capabilities.7:104
1011 "Bypass permission checks on operations that normally require the file system "
1012 "UID of the process to match the UID of the file (e.g., B<chmod>(2), B<utime>"
1013 "(2)), excluding those operations covered by B<CAP_DAC_OVERRIDE> and "
1014 "B<CAP_DAC_READ_SEARCH>;"
1016 "通常、プロセスのファイルシステム UID がファイルの UID に一致することが 要求さ"
1017 "れる操作 (例えば B<chmod>(2), B<utime>(2)) における権限チェックをバイパスす"
1018 "る。 但し、 B<CAP_DAC_OVERRIDE> か B<CAP_DAC_READ_SEARCH> によりチェックが行"
1022 #: build/C/man7/capabilities.7:108
1023 msgid "set extended file attributes (see B<chattr>(1)) on arbitrary files;"
1025 "任意のファイルに対して拡張ファイル属性を設定する (B<chattr>(1) 参照)。"
1028 #: build/C/man7/capabilities.7:110
1029 msgid "set Access Control Lists (ACLs) on arbitrary files;"
1030 msgstr "任意のファイルに対してアクセス制御リスト (ACL) を設定する。"
1033 #: build/C/man7/capabilities.7:112
1034 msgid "ignore directory sticky bit on file deletion;"
1035 msgstr "ファイルの削除の際にディレクトリのスティッキービットを無視する。"
1038 #: build/C/man7/capabilities.7:119
1040 "specify B<O_NOATIME> for arbitrary files in B<open>(2) and B<fcntl>(2)."
1042 "B<open>(2) や B<fcntl>(2) で任意のファイルに対して B<O_NOATIME> を指定す"
1046 #: build/C/man7/capabilities.7:121
1048 msgid "B<CAP_FSETID>"
1049 msgstr "B<CAP_FSETID>"
1052 #: build/C/man7/capabilities.7:127
1054 "Don't clear set-user-ID and set-group-ID permission bits when a file is "
1055 "modified; set the set-group-ID bit for a file whose GID does not match the "
1056 "file system or any of the supplementary GIDs of the calling process."
1058 "ファイルが変更されたときに set-user-ID とset-group-ID の許可ビットをクリア し"
1059 "ない。呼び出し元プロセスのファイルシステム GID と追加の GID のいずれとも GID "
1060 "が一致しないファイルに対して set-group-ID ビットを設定する。"
1063 #: build/C/man7/capabilities.7:127
1065 msgid "B<CAP_IPC_LOCK>"
1066 msgstr "B<CAP_IPC_LOCK>"
1068 #. FIXME As at Linux 3.2, there are some strange uses of this capability
1069 #. in other places; they probably should be replaced with something else.
1071 #: build/C/man7/capabilities.7:136
1072 msgid "Lock memory (B<mlock>(2), B<mlockall>(2), B<mmap>(2), B<shmctl>(2))."
1074 "メモリーのロック (B<mlock>(2), B<mlockall>(2), B<mmap>(2), B<shmctl>(2)) を"
1078 #: build/C/man7/capabilities.7:136
1080 msgid "B<CAP_IPC_OWNER>"
1081 msgstr "B<CAP_IPC_OWNER>"
1084 #: build/C/man7/capabilities.7:139
1085 msgid "Bypass permission checks for operations on System V IPC objects."
1087 "System V IPC オブジェクトに対する操作に関して権限チェックをバイパスする。"
1090 #: build/C/man7/capabilities.7:139
1093 msgstr "B<CAP_KILL>"
1095 #. FIXME CAP_KILL also has an effect for threads + setting child
1096 #. termination signal to other than SIGCHLD: without this
1097 #. capability, the termination signal reverts to SIGCHLD
1098 #. if the child does an exec(). What is the rationale
1101 #: build/C/man7/capabilities.7:152
1103 "Bypass permission checks for sending signals (see B<kill>(2)). This "
1104 "includes use of the B<ioctl>(2) B<KDSIGACCEPT> operation."
1106 "シグナルを送信する際に権限チェックをバイパスする (B<kill>(2) 参照)。これに"
1107 "は B<ioctl>(2) の B<KDSIGACCEPT> 操作の使用も含まれる。"
1110 #: build/C/man7/capabilities.7:152
1112 msgid "B<CAP_LEASE> (since Linux 2.4)"
1113 msgstr "B<CAP_LEASE> (Linux 2.4 以降)"
1116 #: build/C/man7/capabilities.7:156
1117 msgid "Establish leases on arbitrary files (see B<fcntl>(2))."
1118 msgstr "任意のファイルに対して ファイルリースを設定する (B<fcntl>(2) 参照)。"
1121 #: build/C/man7/capabilities.7:156
1123 msgid "B<CAP_LINUX_IMMUTABLE>"
1124 msgstr "B<CAP_LINUX_IMMUTABLE>"
1126 #. These attributes are now available on ext2, ext3, Reiserfs, XFS, JFS
1128 #: build/C/man7/capabilities.7:165
1130 "Set the B<FS_APPEND_FL> and B<FS_IMMUTABLE_FL> i-node flags (see B<chattr>"
1133 "拡張ファイル属性 B<FS_APPEND_FL> と B<FS_IMMUTABLE_FL> を設定する (B<chattr>"
1137 #: build/C/man7/capabilities.7:165
1139 msgid "B<CAP_MAC_ADMIN> (since Linux 2.6.25)"
1140 msgstr "B<CAP_MAC_ADMIN> (Linux 2.6.25 以降)"
1143 #: build/C/man7/capabilities.7:169
1145 "Override Mandatory Access Control (MAC). Implemented for the Smack Linux "
1146 "Security Module (LSM)."
1148 "強制アクセス制御 (MAC) を上書きする。 Smack Linux Security Module (LSM) 用に"
1152 #: build/C/man7/capabilities.7:169
1154 msgid "B<CAP_MAC_OVERRIDE> (since Linux 2.6.25)"
1155 msgstr "B<CAP_MAC_OVERRIDE> (Linux 2.6.25 以降)"
1158 #: build/C/man7/capabilities.7:173
1160 "Allow MAC configuration or state changes. Implemented for the Smack LSM."
1161 msgstr "MAC の設定や状態を変更する。 Smack LSM 用に実装されている。"
1164 #: build/C/man7/capabilities.7:173
1166 msgid "B<CAP_MKNOD> (since Linux 2.4)"
1167 msgstr "B<CAP_MKNOD> (Linux 2.4 以降)"
1170 #: build/C/man7/capabilities.7:177
1171 msgid "Create special files using B<mknod>(2)."
1173 "(Linux 2.4 以降) B<mknod>(2) を使用してスペシャルファイルを作成する。"
1176 #: build/C/man7/capabilities.7:177
1178 msgid "B<CAP_NET_ADMIN>"
1179 msgstr "B<CAP_NET_ADMIN>"
1182 #: build/C/man7/capabilities.7:180
1183 msgid "Perform various network-related operations:"
1187 #: build/C/man7/capabilities.7:184
1188 msgid "interface configuration;"
1192 #: build/C/man7/capabilities.7:186
1193 msgid "administration of IP firewall, masquerading, and accounting"
1197 #: build/C/man7/capabilities.7:188
1198 msgid "modify routing tables;"
1202 #: build/C/man7/capabilities.7:190
1203 msgid "bind to any address for transparent proxying;"
1207 #: build/C/man7/capabilities.7:192
1208 msgid "set type-of-service (TOS)"
1212 #: build/C/man7/capabilities.7:194
1213 msgid "clear driver statistics;"
1217 #: build/C/man7/capabilities.7:196
1218 msgid "set promiscuous mode;"
1222 #: build/C/man7/capabilities.7:198
1223 msgid "enabling multicasting;"
1227 #: build/C/man7/capabilities.7:209
1229 "use B<setsockopt>(2) to set the following socket options: B<SO_DEBUG>, "
1230 "B<SO_MARK>, B<SO_PRIORITY> (for a priority outside the range 0 to 6), "
1231 "B<SO_RCVBUFFORCE>, and B<SO_SNDBUFFORCE>."
1235 #: build/C/man7/capabilities.7:211
1237 msgid "B<CAP_NET_BIND_SERVICE>"
1238 msgstr "B<CAP_NET_BIND_SERVICE>"
1241 #: build/C/man7/capabilities.7:215
1243 "Bind a socket to Internet domain privileged ports (port numbers less than "
1246 "インターネットドメインの特権ポート (ポート番号が 1024 番未満) をバインドでき"
1250 #: build/C/man7/capabilities.7:215
1252 msgid "B<CAP_NET_BROADCAST>"
1253 msgstr "B<CAP_NET_BROADCAST>"
1256 #: build/C/man7/capabilities.7:218
1257 msgid "(Unused) Make socket broadcasts, and listen to multicasts."
1259 "(未使用) ソケットのブロードキャストと、マルチキャストの待ち受けを行う。"
1262 #: build/C/man7/capabilities.7:218
1264 msgid "B<CAP_NET_RAW>"
1265 msgstr "B<CAP_NET_RAW>"
1268 #: build/C/man7/capabilities.7:224
1269 msgid "use RAW and PACKET sockets;"
1270 msgstr "RAW ソケットと PACKET ソケットを使用する。"
1273 #: build/C/man7/capabilities.7:226
1274 msgid "bind to any address for transparent proxying."
1278 #: build/C/man7/capabilities.7:229
1280 msgid "B<CAP_SETGID>"
1281 msgstr "B<CAP_SETGID>"
1284 #: build/C/man7/capabilities.7:233
1286 "Make arbitrary manipulations of process GIDs and supplementary GID list; "
1287 "forge GID when passing socket credentials via UNIX domain sockets."
1289 "プロセスの GID と追加の GID リストに対する任意の操作を行う。 UNIX ドメインソ"
1290 "ケット経由でソケットの資格情報 (credential) を渡す際に 偽の GID を渡すことが"
1294 #: build/C/man7/capabilities.7:233
1296 msgid "B<CAP_SETFCAP> (since Linux 2.6.24)"
1297 msgstr "B<CAP_SETFCAP> (Linux 2.6.24 以降)"
1300 #: build/C/man7/capabilities.7:236
1301 msgid "Set file capabilities."
1302 msgstr "ファイルケーパビリティを設定する。"
1305 #: build/C/man7/capabilities.7:236
1307 msgid "B<CAP_SETPCAP>"
1308 msgstr "B<CAP_SETPCAP>"
1311 #: build/C/man7/capabilities.7:247
1313 "If file capabilities are not supported: grant or remove any capability in "
1314 "the caller's permitted capability set to or from any other process. (This "
1315 "property of B<CAP_SETPCAP> is not available when the kernel is configured to "
1316 "support file capabilities, since B<CAP_SETPCAP> has entirely different "
1317 "semantics for such kernels.)"
1319 "ファイルケーパビリティがサポートされていない場合: 呼び出し元が許可されている"
1320 "ケーパビリティセットに含まれる任意のケーパビリティを、 他のプロセスに付与した"
1321 "り、削除したりできる。 (カーネルがファイルケーパビリティをサポートしている場"
1322 "合、 B<CAP_SETPCAP> はこの役割を持たない。 なぜなら、ファイルケーパビリティを"
1323 "サポートしているカーネルでは B<CAP_SETPCAP> は全く別の意味を持つからである。)"
1326 #: build/C/man7/capabilities.7:257
1328 "If file capabilities are supported: add any capability from the calling "
1329 "thread's bounding set to its inheritable set; drop capabilities from the "
1330 "bounding set (via B<prctl>(2) B<PR_CAPBSET_DROP>); make changes to the "
1331 "I<securebits> flags."
1333 "ファイルケーパビリティがサポートされている場合: 呼び出し元スレッドのバウン"
1334 "ディングセットの任意のケーパビリティを 自身の継承可能ケーパビリティセットに追"
1335 "加できる。 (B<prctl>(2) B<PR_CAPBSET_DROP> を使って) バウンディングセットか"
1336 "らケーパビリティを削除できる。 I<securebits> フラグを変更できる。"
1339 #: build/C/man7/capabilities.7:257
1341 msgid "B<CAP_SETUID>"
1342 msgstr "B<CAP_SETUID>"
1344 #. FIXME CAP_SETUID also an effect in exec(); document this.
1346 #: build/C/man7/capabilities.7:266
1348 "Make arbitrary manipulations of process UIDs (B<setuid>(2), B<setreuid>(2), "
1349 "B<setresuid>(2), B<setfsuid>(2)); make forged UID when passing socket "
1350 "credentials via UNIX domain sockets."
1352 "プロセスの UID に対する任意の操作 (B<setuid>(2), B<setreuid>(2), B<setresuid>"
1353 "(2), B<setfsuid>(2)) を行う。 UNIX ドメインソケット経由でソケットの資格情報 "
1354 "(credential) を渡す際に 偽の UID を渡すことができる。"
1357 #: build/C/man7/capabilities.7:266
1359 msgid "B<CAP_SYS_ADMIN>"
1360 msgstr "B<CAP_SYS_ADMIN>"
1363 #: build/C/man7/capabilities.7:280
1365 "Perform a range of system administration operations including: B<quotactl>"
1366 "(2), B<mount>(2), B<umount>(2), B<swapon>(2), B<swapoff>(2), B<sethostname>"
1367 "(2), and B<setdomainname>(2);"
1369 "以下のシステム管理用の操作を実行する: B<quotactl>(2), B<mount>(2), B<umount>"
1370 "(2), B<swapon>(2), B<swapoff>(2), B<sethostname>(2), B<setdomainname>(2)."
1373 #: build/C/man7/capabilities.7:286
1375 "perform privileged B<syslog>(2) operations (since Linux 2.6.37, "
1376 "B<CAP_SYSLOG> should be used to permit such operations);"
1380 #: build/C/man7/capabilities.7:291
1381 msgid "perform B<VM86_REQUEST_IRQ> B<vm86>(2) command;"
1385 #: build/C/man7/capabilities.7:297
1387 "perform B<IPC_SET> and B<IPC_RMID> operations on arbitrary System V IPC "
1390 "任意の System V IPC オブジェクトに対する B<IPC_SET> と B<IPC_RMID> 操作を実行"
1394 #: build/C/man7/capabilities.7:304
1396 "perform operations on I<trusted> and I<security> Extended Attributes (see "
1399 "拡張属性 I<trusted> と I<security> に対する操作を実行する (B<attr>(5) 参"
1403 #: build/C/man7/capabilities.7:307
1404 msgid "use B<lookup_dcookie>(2);"
1405 msgstr "B<lookup_dcookie>(2) を呼び出す。"
1408 #: build/C/man7/capabilities.7:315
1410 "use B<ioprio_set>(2) to assign B<IOPRIO_CLASS_RT> and (before Linux "
1411 "2.6.25) B<IOPRIO_CLASS_IDLE> I/O scheduling classes;"
1413 "B<ioprio_set>(2) を使って I/O スケジューリングクラス B<IOPRIO_CLASS_RT>, "
1414 "B<IOPRIO_CLASS_IDLE> を割り当てる (B<IOPRIO_CLASS_IDLE> は Linux 2.6.25 より"
1418 #: build/C/man7/capabilities.7:317
1419 msgid "forge UID when passing socket credentials;"
1420 msgstr "ソケットの資格情報 (credential) を渡す際に偽の UID を渡す。"
1423 #: build/C/man7/capabilities.7:326
1425 "exceed I</proc/sys/fs/file-max>, the system-wide limit on the number of open "
1426 "files, in system calls that open files (e.g., B<accept>(2), B<execve>(2), "
1427 "B<open>(2), B<pipe>(2));"
1429 "ファイルをオープンするシステムコール (例えば B<accept>(2), B<execve>(2), "
1430 "B<open>(2), B<pipe>(2)) でシステム全体でオープンできるファイル数の上限 I</"
1431 "proc/sys/fs/file-max> を超過する。"
1434 #: build/C/man7/capabilities.7:333
1436 #| msgid "employ B<CLONE_NEWNS> flag with B<clone>(2) and B<unshare>(2);"
1438 "employ B<CLONE_*> flags that create new namespaces with B<clone>(2) and "
1440 msgstr "B<clone>(2) と B<unshare>(2) で B<CLONE_NEWNS> フラグを利用する。"
1443 #: build/C/man7/capabilities.7:336
1444 msgid "call B<perf_event_open>(2);"
1448 #: build/C/man7/capabilities.7:340
1449 msgid "access privileged I<perf> event information;"
1453 #: build/C/man7/capabilities.7:343
1454 msgid "call B<setns>(2);"
1458 #: build/C/man7/capabilities.7:346
1459 msgid "call B<fanotify_init>(2);"
1463 #: build/C/man7/capabilities.7:353
1464 msgid "perform B<KEYCTL_CHOWN> and B<KEYCTL_SETPERM> B<keyctl>(2) operations;"
1465 msgstr "B<keyctl>(2) の B<KEYCTL_CHOWN> と B<KEYCTL_SETPERM> 操作を実行する。"
1468 #: build/C/man7/capabilities.7:358
1469 msgid "perform B<madvise>(2) B<MADV_HWPOISON> operation;"
1470 msgstr "B<madvise>(2) の B<MADV_HWPOISON> 操作を実行する。"
1473 #: build/C/man7/capabilities.7:364
1475 "employ the B<TIOCSTI> B<ioctl>(2) to insert characters into the input queue "
1476 "of a terminal other than the caller's controlling terminal."
1480 #: build/C/man7/capabilities.7:368
1482 #| msgid "Time of the last B<msgrcv>(2) system call."
1483 msgid "employ the obsolete B<nfsservctl>(2); system call;"
1484 msgstr "最後に B<msgrcv>(2) を行なった時間。"
1487 #: build/C/man7/capabilities.7:372
1489 #| msgid "Time of the last B<shmat>(2) system call."
1490 msgid "employ the obsolete B<bdflush>(2) system call;"
1491 msgstr "最後に B<shmat>(2) システムコールを行なった時間。"
1494 #: build/C/man7/capabilities.7:376
1495 msgid "perform various privileged block-device B<ioctl>(2) operations;"
1499 #: build/C/man7/capabilities.7:380
1500 msgid "perform various privileged file-system B<ioctl>(2) operations;"
1504 #: build/C/man7/capabilities.7:382
1505 msgid "perform administrative operations on many device drivers."
1509 #: build/C/man7/capabilities.7:384
1511 msgid "B<CAP_SYS_BOOT>"
1512 msgstr "B<CAP_SYS_BOOT>"
1515 #: build/C/man7/capabilities.7:390
1516 msgid "Use B<reboot>(2) and B<kexec_load>(2)."
1517 msgstr "B<reboot>(2) と B<kexec_load>(2) を呼び出す。"
1520 #: build/C/man7/capabilities.7:390
1522 msgid "B<CAP_SYS_CHROOT>"
1523 msgstr "B<CAP_SYS_CHROOT>"
1526 #: build/C/man7/capabilities.7:394
1527 msgid "Use B<chroot>(2)."
1528 msgstr "B<chroot>(2). を呼び出す。"
1531 #: build/C/man7/capabilities.7:394
1533 msgid "B<CAP_SYS_MODULE>"
1534 msgstr "B<CAP_SYS_MODULE>"
1537 #: build/C/man7/capabilities.7:403
1539 "Load and unload kernel modules (see B<init_module>(2) and B<delete_module>"
1540 "(2)); in kernels before 2.6.25: drop capabilities from the system-wide "
1541 "capability bounding set."
1543 "カーネルモジュールのロード、アンロードを行う (B<init_module>(2) と "
1544 "B<delete_module>(2) を参照のこと)。 バージョン 2.6.25 より前のカーネルで、 "
1545 "システム全体のケーパビリティバウンディングセット (capability bounding set) "
1549 #: build/C/man7/capabilities.7:403
1551 msgid "B<CAP_SYS_NICE>"
1552 msgstr "B<CAP_SYS_NICE>"
1555 #: build/C/man7/capabilities.7:412
1557 "Raise process nice value (B<nice>(2), B<setpriority>(2)) and change the "
1558 "nice value for arbitrary processes;"
1560 "プロセスの nice 値の引き上げ (B<nice>(2), B<setpriority>(2)) や、任意のプロ"
1564 #: build/C/man7/capabilities.7:417
1566 "set real-time scheduling policies for calling process, and set scheduling "
1567 "policies and priorities for arbitrary processes (B<sched_setscheduler>(2), "
1568 "B<sched_setparam>(2));"
1570 "呼び出し元プロセスに対するリアルタイムスケジューリングポリシーと、 任意のプロ"
1571 "セスに対するスケジューリングポリシーと優先度を設定する (B<sched_setscheduler>"
1572 "(2), B<sched_setparam>(2))。"
1575 #: build/C/man7/capabilities.7:420
1576 msgid "set CPU affinity for arbitrary processes (B<sched_setaffinity>(2));"
1578 "任意のプロセスに対する CPU affinity を設定できる (B<sched_setaffinity>(2))。"
1581 #: build/C/man7/capabilities.7:423
1583 "set I/O scheduling class and priority for arbitrary processes (B<ioprio_set>"
1586 "任意のプロセスに対して I/O スケジューリングクラスと優先度を設定できる "
1587 "(B<ioprio_set>(2))。"
1589 #. FIXME CAP_SYS_NICE also has the following effect for
1590 #. migrate_pages(2):
1591 #. do_migrate_pages(mm, &old, &new,
1592 #. capable(CAP_SYS_NICE) ? MPOL_MF_MOVE_ALL : MPOL_MF_MOVE);
1594 #: build/C/man7/capabilities.7:432
1596 "apply B<migrate_pages>(2) to arbitrary processes and allow processes to be "
1597 "migrated to arbitrary nodes;"
1599 "B<migrate_pages>(2) を任意のプロセスに適用し、プロセスを任意のノードに移動す"
1603 #: build/C/man7/capabilities.7:436
1604 msgid "apply B<move_pages>(2) to arbitrary processes;"
1605 msgstr "B<move_pages>(2) を任意のプロセスに対して行う。"
1608 #: build/C/man7/capabilities.7:443
1610 "use the B<MPOL_MF_MOVE_ALL> flag with B<mbind>(2) and B<move_pages>(2)."
1612 "B<mbind>(2) と B<move_pages>(2) で B<MPOL_MF_MOVE_ALL> フラグを使用する。"
1615 #: build/C/man7/capabilities.7:445
1617 msgid "B<CAP_SYS_PACCT>"
1618 msgstr "B<CAP_SYS_PACCT>"
1621 #: build/C/man7/capabilities.7:449
1622 msgid "Use B<acct>(2)."
1623 msgstr "B<acct>(2) を呼び出す。"
1626 #: build/C/man7/capabilities.7:449
1628 msgid "B<CAP_SYS_PTRACE>"
1629 msgstr "B<CAP_SYS_PTRACE>"
1632 #: build/C/man7/capabilities.7:456
1634 "Trace arbitrary processes using B<ptrace>(2); apply B<get_robust_list>(2) "
1635 "to arbitrary processes."
1637 "B<ptrace>(2) を使って任意のプロセスをトレースする。 任意のプロセスに "
1638 "B<get_robust_list>(2) を適用する。"
1641 #: build/C/man7/capabilities.7:456
1643 msgid "B<CAP_SYS_RAWIO>"
1644 msgstr "B<CAP_SYS_RAWIO>"
1647 #: build/C/man7/capabilities.7:468
1650 #| "Perform I/O port operations (B<iopl>(2) and B<ioperm>(2)); access I</"
1653 "Perform I/O port operations (B<iopl>(2) and B<ioperm>(2)); access I</proc/"
1654 "kcore>; employ the B<FIBMAP> B<ioctl>(2) operation."
1656 "I/O ポート操作を実行する (B<iopl>(2) 、 B<ioperm>(2))。 I</proc/kcore> にア"
1660 #: build/C/man7/capabilities.7:468
1662 msgid "B<CAP_SYS_RESOURCE>"
1663 msgstr "B<CAP_SYS_RESOURCE>"
1666 #: build/C/man7/capabilities.7:474
1667 msgid "Use reserved space on ext2 file systems;"
1668 msgstr "ext2 ファイルシステム上の予約されている領域を使用する。"
1671 #: build/C/man7/capabilities.7:478
1672 msgid "make B<ioctl>(2) calls controlling ext3 journaling;"
1673 msgstr "ext3 のジャーナル機能を制御する B<ioctl>(2) を使用する。"
1676 #: build/C/man7/capabilities.7:480
1677 msgid "override disk quota limits;"
1678 msgstr "ディスク quota の上限を上書きする。"
1681 #: build/C/man7/capabilities.7:483
1682 msgid "increase resource limits (see B<setrlimit>(2));"
1683 msgstr "リソース上限を増やす (B<setrlimit>(2))。"
1686 #: build/C/man7/capabilities.7:487
1687 msgid "override B<RLIMIT_NPROC> resource limit;"
1688 msgstr "B<RLIMIT_NPROC> リソース制限を上書きする。"
1691 #: build/C/man7/capabilities.7:489
1692 msgid "override maximum number of consoles on console allocation;"
1696 #: build/C/man7/capabilities.7:491
1697 msgid "override maximum number of keymaps;"
1701 #: build/C/man7/capabilities.7:493
1702 msgid "allow more than 64hz interrupts from the real-time clock;"
1706 #: build/C/man7/capabilities.7:502
1709 #| "raise I<msg_qbytes> limit for a System V message queue above the limit in "
1710 #| "I</proc/sys/kernel/msgmnb> (see B<msgop>(2) and B<msgctl>(2))."
1712 "raise I<msg_qbytes> limit for a System V message queue above the limit in I</"
1713 "proc/sys/kernel/msgmnb> (see B<msgop>(2) and B<msgctl>(2));"
1715 "メッセージキューに関する上限 I<msg_qbytes> を I</proc/sys/kernel/msgmnb> に指"
1716 "定されている上限よりも大きく設定する (B<msgop>(2) と B<msgctl>(2) 参照)。"
1719 #: build/C/man7/capabilities.7:509
1721 "override the I</proc/sys/fs/pipe-size-max> limit when setting the capacity "
1722 "of a pipe using the B<F_SETPIPE_SZ> B<fcntl>(2) command."
1726 #: build/C/man7/capabilities.7:514
1729 #| "use B<F_SETPIPE_SZ> to increase the capacity of a pipe above the limit "
1730 #| "specified by I</proc/sys/fs/pipe-max-size>."
1732 "use B<F_SETPIPE_SZ> to increase the capacity of a pipe above the limit "
1733 "specified by I</proc/sys/fs/pipe-max-size>;"
1735 "I</proc/sys/fs/pipe-max-size> に指定されている上限を超えてパイプの容量を増や"
1736 "すのに B<F_SETPIPE_SZ> を使用する。"
1739 #: build/C/man7/capabilities.7:519
1741 "override I</proc/sys/fs/mqueue/queues_max> limit when creating POSIX message "
1742 "queues (see B<mq_overview>(7));"
1746 #: build/C/man7/capabilities.7:524
1747 msgid "employ B<prctl>(2) B<PR_SET_MM> operation."
1751 #: build/C/man7/capabilities.7:526
1753 msgid "B<CAP_SYS_TIME>"
1754 msgstr "B<CAP_SYS_TIME>"
1757 #: build/C/man7/capabilities.7:533
1759 "Set system clock (B<settimeofday>(2), B<stime>(2), B<adjtimex>(2)); set real-"
1760 "time (hardware) clock."
1762 "システムクロックを変更する (B<settimeofday>(2), B<stime>(2), B<adjtimex>"
1763 "(2))。 リアルタイム (ハードウェア) クロックを変更する。"
1766 #: build/C/man7/capabilities.7:533
1768 msgid "B<CAP_SYS_TTY_CONFIG>"
1769 msgstr "B<CAP_SYS_TTY_CONFIG>"
1772 #: build/C/man7/capabilities.7:540
1774 "Use B<vhangup>(2); employ various privileged B<ioctl>(2) operations on "
1775 "virtual terminals."
1779 #: build/C/man7/capabilities.7:540
1781 msgid "B<CAP_SYSLOG> (since Linux 2.6.37)"
1782 msgstr "B<CAP_SYSLOG> (Linux 2.6.37 以降)"
1785 #: build/C/man7/capabilities.7:548
1787 "Perform privileged B<syslog>(2) operations. See B<syslog>(2) for "
1788 "information on which operations require privilege."
1792 #: build/C/man7/capabilities.7:548
1794 msgid "B<CAP_WAKE_ALARM> (since Linux 3.0)"
1795 msgstr "B<CAP_WAKE_ALARM> (Linux 3.0 以降)"
1798 #: build/C/man7/capabilities.7:556
1800 "Trigger something that will wake up the system (set B<CLOCK_REALTIME_ALARM> "
1801 "and B<CLOCK_BOOTTIME_ALARM> timers)."
1805 #: build/C/man7/capabilities.7:556
1807 msgid "Past and Current Implementation"
1811 #: build/C/man7/capabilities.7:558
1812 msgid "A full implementation of capabilities requires that:"
1813 msgstr "完全な形のケーパビリティを実装するには、以下の要件を満たす必要がある:"
1816 #: build/C/man7/capabilities.7:558 build/C/man7/capabilities.7:701
1817 #: build/C/man7/capabilities.7:848 build/C/man7/capabilities.7:901
1823 #: build/C/man7/capabilities.7:562
1825 "For all privileged operations, the kernel must check whether the thread has "
1826 "the required capability in its effective set."
1828 "全ての特権操作について、カーネルはそのスレッドの実効ケーパビリティセットに 必"
1829 "要なケーパビリティがあるかを確認する。"
1832 #: build/C/man7/capabilities.7:562 build/C/man7/capabilities.7:706
1833 #: build/C/man7/capabilities.7:854 build/C/man7/capabilities.7:907
1839 #: build/C/man7/capabilities.7:565
1841 "The kernel must provide system calls allowing a thread's capability sets to "
1842 "be changed and retrieved."
1844 "カーネルで、あるスレッドのケーパビリティセットを変更したり、 取得したりできる"
1848 #: build/C/man7/capabilities.7:565 build/C/man7/capabilities.7:857
1849 #: build/C/man7/capabilities.7:911
1855 #: build/C/man7/capabilities.7:568
1857 "The file system must support attaching capabilities to an executable file, "
1858 "so that a process gains those capabilities when the file is executed."
1860 "ファイルシステムが、実行可能ファイルにケーパビリティを付与でき、ファイル 実行"
1861 "時にそのケーパビリティをプロセスが取得できるような機能をサポートする。"
1864 #: build/C/man7/capabilities.7:572
1866 "Before kernel 2.6.24, only the first two of these requirements are met; "
1867 "since kernel 2.6.24, all three requirements are met."
1869 "カーネル 2.6.24 より前では、最初の 2つの要件のみが満たされている。 カーネル "
1870 "2.6.24 以降では、3つの要件すべてが満たされている。"
1873 #: build/C/man7/capabilities.7:572
1875 msgid "Thread Capability Sets"
1876 msgstr "スレッドケーパビリティセット"
1879 #: build/C/man7/capabilities.7:575
1881 "Each thread has three capability sets containing zero or more of the above "
1884 "各スレッドは以下の 3種類のケーパビリティセットを持つ。各々のケーパビリティ"
1885 "セットは 上記のケーパビリティの組み合わせである (全てのケーパビリティが無効で"
1889 #: build/C/man7/capabilities.7:575
1891 msgid "I<Permitted>:"
1892 msgstr "I<許可 (permitted)>:"
1895 #: build/C/man7/capabilities.7:583
1897 "This is a limiting superset for the effective capabilities that the thread "
1898 "may assume. It is also a limiting superset for the capabilities that may be "
1899 "added to the inheritable set by a thread that does not have the "
1900 "B<CAP_SETPCAP> capability in its effective set."
1902 "そのスレッドが持つことになっている実効ケーパビリティの 限定的なスーパーセット"
1903 "である。 これは、実効ケーパビリティセットに B<CAP_SETPCAP> ケーパビリティを"
1904 "持っていないスレッドが継承可能ケーパビリティセットに 追加可能なケーパビリティ"
1908 #: build/C/man7/capabilities.7:589
1910 "If a thread drops a capability from its permitted set, it can never "
1911 "reacquire that capability (unless it B<execve>(2)s either a set-user-ID-root "
1912 "program, or a program whose associated file capabilities grant that "
1915 "許可ケーパビリティセットから削除してしまったケーパビリティは、 (set-user-ID-"
1916 "root プログラムか、 そのケーパビリティをファイルケーパビリティで許可している"
1917 "プログラムを B<execve>(2) しない限りは) もう一度獲得することはできない。"
1920 #: build/C/man7/capabilities.7:589
1922 msgid "I<Inheritable>:"
1923 msgstr "I<継承可能 (inheritable)>:"
1926 #: build/C/man7/capabilities.7:596
1928 "This is a set of capabilities preserved across an B<execve>(2). It provides "
1929 "a mechanism for a process to assign capabilities to the permitted set of the "
1930 "new program during an B<execve>(2)."
1932 "B<execve>(2) を前後で保持されるケーパビリティセットである。 この仕組みを使う"
1933 "ことで、あるプロセスが B<execve>(2) を行う際に新しいプログラムの許可ケーパビ"
1934 "リティセットとして 割り当てるケーパビリティを指定することができる。"
1937 #: build/C/man7/capabilities.7:596 build/C/man7/capabilities.7:638
1939 msgid "I<Effective>:"
1940 msgstr "I<実効 (effective)>:"
1943 #: build/C/man7/capabilities.7:600
1945 "This is the set of capabilities used by the kernel to perform permission "
1946 "checks for the thread."
1948 "カーネルがスレッドの権限 (permission) をチェックするときに 使用するケーパビリ"
1952 #: build/C/man7/capabilities.7:606
1954 "A child created via B<fork>(2) inherits copies of its parent's capability "
1955 "sets. See below for a discussion of the treatment of capabilities during "
1958 "B<fork>(2) で作成される子プロセスは、親のケーパビリティセットのコピーを継承"
1959 "する。 B<execve>(2) 中のケーパビリティの扱いについては下記を参照のこと。"
1962 #: build/C/man7/capabilities.7:611
1964 "Using B<capset>(2), a thread may manipulate its own capability sets (see "
1967 "B<capset>(2) を使うと、プロセスは自分自身のケーパビリティセット を操作するこ"
1971 #: build/C/man7/capabilities.7:611
1973 msgid "File Capabilities"
1974 msgstr "ファイルケーパビリティ"
1977 #: build/C/man7/capabilities.7:626
1979 "Since kernel 2.6.24, the kernel supports associating capability sets with an "
1980 "executable file using B<setcap>(8). The file capability sets are stored in "
1981 "an extended attribute (see B<setxattr>(2)) named I<security.capability>. "
1982 "Writing to this extended attribute requires the B<CAP_SETFCAP> capability. "
1983 "The file capability sets, in conjunction with the capability sets of the "
1984 "thread, determine the capabilities of a thread after an B<execve>(2)."
1986 "カーネル 2.6.24 以降では、 B<setcap>(8) を使って実行ファイルにケーパビリティ"
1987 "セットを対応付けることができる。 ファイルケーパビリティセットは I<security."
1988 "capability> という名前の拡張属性に保存される (B<setxattr>(2) 参照)。この拡張"
1989 "属性への書き込みには B<CAP_SETFCAP> ケーパビリティが必要である。 ファイルケー"
1990 "パビリティセットとスレッドのケーパビリティセットの両方が 考慮され、 B<execve>"
1991 "(2) 後のスレッドのケーパビリティセットが決定される。"
1994 #: build/C/man7/capabilities.7:628
1995 msgid "The three file capability sets are:"
1996 msgstr "3 つのファイルケーパビリティセットが定義されている。"
1999 #: build/C/man7/capabilities.7:628
2001 msgid "I<Permitted> (formerly known as I<forced>):"
2002 msgstr "I<許可 (Permitted)> (以前のI<強制 (Forced)>):"
2005 #: build/C/man7/capabilities.7:632
2007 "These capabilities are automatically permitted to the thread, regardless of "
2008 "the thread's inheritable capabilities."
2010 "スレッドの継承可能ケーパビリティに関わらず、そのスレッドに自動的に 認められる"
2014 #: build/C/man7/capabilities.7:632
2016 msgid "I<Inheritable> (formerly known as I<allowed>):"
2017 msgstr "I<継承可能 (Inheritable)> (以前の I<許容 (Allowed)>):"
2020 #: build/C/man7/capabilities.7:638
2022 "This set is ANDed with the thread's inheritable set to determine which "
2023 "inheritable capabilities are enabled in the permitted set of the thread "
2024 "after the B<execve>(2)."
2026 "このセットと、スレッドの継承可能ケーパビリティセットとの 論理積 (AND) がとら"
2027 "れ、 B<execve>(2) の後にそのスレッドの許可ケーパビリティセットで有効となる "
2028 "継承可能ケーパビリティが決定される。"
2031 #: build/C/man7/capabilities.7:648
2033 "This is not a set, but rather just a single bit. If this bit is set, then "
2034 "during an B<execve>(2) all of the new permitted capabilities for the thread "
2035 "are also raised in the effective set. If this bit is not set, then after an "
2036 "B<execve>(2), none of the new permitted capabilities is in the new effective "
2039 "これは集合ではなく、1 ビットの情報である。 このビットがセットされていると、 "
2040 "B<execve>(2) 実行中に、そのスレッドの新しい許可ケーパビリティが全て 実効ケー"
2041 "パビリティ集合においてもセットされる。 このビットがセットされていない場合、 "
2042 "B<execve>(2) 後には新しい許可ケーパビリティのどれも新しい実効ケーパビリティ"
2046 #: build/C/man7/capabilities.7:664
2048 "Enabling the file effective capability bit implies that any file permitted "
2049 "or inheritable capability that causes a thread to acquire the corresponding "
2050 "permitted capability during an B<execve>(2) (see the transformation rules "
2051 "described below) will also acquire that capability in its effective set. "
2052 "Therefore, when assigning capabilities to a file (B<setcap>(8), "
2053 "B<cap_set_file>(3), B<cap_set_fd>(3)), if we specify the effective flag as "
2054 "being enabled for any capability, then the effective flag must also be "
2055 "specified as enabled for all other capabilities for which the corresponding "
2056 "permitted or inheritable flags is enabled."
2058 "ファイルの実効ケーパビリティビットを有効にするというのは、 B<execve>(2) 実行"
2059 "時に、ファイルの許可ケーパビリティと継承ケーパビリティに対応するものが スレッ"
2060 "ドの許可ケーパビリティセットとしてセットされるが、 これが実効ケーパビリティ"
2061 "セットにもセットされるということである (ケーパビリティの変換ルールは下記参"
2062 "照)。 したがって、ファイルにケーパビリティを割り当てる際 (B<setcap>(8), "
2063 "B<cap_set_file>(3), B<cap_set_fd>(3))、 いずれかのケーパビリティに対して実効"
2064 "フラグを有効と指定する場合、 許可フラグや継承可能フラグを有効にした他の全ての"
2065 "ケーパビリティ についても実効フラグを有効と指定しなければならない。"
2068 #: build/C/man7/capabilities.7:664
2070 msgid "Transformation of Capabilities During execve()"
2071 msgstr "execve() 中のケーパビリティの変換"
2074 #: build/C/man7/capabilities.7:670
2076 "During an B<execve>(2), the kernel calculates the new capabilities of the "
2077 "process using the following algorithm:"
2079 "B<execve>(2) 実行時に、カーネルはプロセスの新しいケーパビリティを次の アルゴ"
2083 #: build/C/man7/capabilities.7:675
2086 "P'(permitted) = (P(inheritable) & F(inheritable)) |\n"
2087 " (F(permitted) & cap_bset)\n"
2089 "P'(permitted) = (P(inheritable) & F(inheritable)) |\n"
2090 " (F(permitted) & cap_bset)\n"
2093 #: build/C/man7/capabilities.7:677
2095 msgid "P'(effective) = F(effective) ? P'(permitted) : 0\n"
2096 msgstr "P'(effective) = F(effective) ? P'(permitted) : 0\n"
2099 #: build/C/man7/capabilities.7:679
2101 msgid "P'(inheritable) = P(inheritable) [i.e., unchanged]\n"
2102 msgstr "P'(inheritable) = P(inheritable) [つまり、変更されない]\n"
2105 #: build/C/man7/capabilities.7:683
2107 msgstr "各変数の意味は以下の通り:"
2110 #: build/C/man7/capabilities.7:684
2116 #: build/C/man7/capabilities.7:687
2117 msgid "denotes the value of a thread capability set before the B<execve>(2)"
2118 msgstr "B<execve>(2) 前のスレッドのケーパビリティセットの値"
2121 #: build/C/man7/capabilities.7:687
2127 #: build/C/man7/capabilities.7:690
2128 msgid "denotes the value of a capability set after the B<execve>(2)"
2129 msgstr "B<execve>(2) 後のスレッドのケーパビリティセットの値"
2132 #: build/C/man7/capabilities.7:690
2138 #: build/C/man7/capabilities.7:692
2139 msgid "denotes a file capability set"
2140 msgstr "ファイルケーパビリティセットの値"
2143 #: build/C/man7/capabilities.7:692
2149 #: build/C/man7/capabilities.7:694
2150 msgid "is the value of the capability bounding set (described below)."
2151 msgstr "ケーパビリティバウンディングセットの値 (下記参照)"
2154 #: build/C/man7/capabilities.7:696
2156 msgid "Capabilities and execution of programs by root"
2157 msgstr "ケーパビリティと、ルートによるプログラムの実行"
2160 #: build/C/man7/capabilities.7:701
2162 "In order to provide an all-powerful I<root> using capability sets, during an "
2165 "B<execve>(2) 時に、ケーパビリティセットを使って、全ての権限を持った I<root> "
2169 #: build/C/man7/capabilities.7:706
2171 "If a set-user-ID-root program is being executed, or the real user ID of the "
2172 "process is 0 (root) then the file inheritable and permitted sets are "
2173 "defined to be all ones (i.e., all capabilities enabled)."
2175 "set-user-ID-root プログラムが実行される場合、 またはプロセスの実ユーザ ID が "
2176 "0 (root) の場合、 ファイルの継承可能セットと許可セットを全て 1 (全てのケーパ"
2180 #: build/C/man7/capabilities.7:709
2182 "If a set-user-ID-root program is being executed, then the file effective bit "
2183 "is defined to be one (enabled)."
2185 "set-user-ID-root プログラムが実行される場合、 ファイルの実効ケーパビリティ"
2186 "ビットを 1 (enabled) に定義する。"
2188 #. If a process with real UID 0, and nonzero effective UID does an
2189 #. exec(), then it gets all capabilities in its
2190 #. permitted set, and no effective capabilities
2192 #: build/C/man7/capabilities.7:724
2194 "The upshot of the above rules, combined with the capabilities "
2195 "transformations described above, is that when a process B<execve>(2)s a set-"
2196 "user-ID-root program, or when a process with an effective UID of 0 B<execve>"
2197 "(2)s a program, it gains all capabilities in its permitted and effective "
2198 "capability sets, except those masked out by the capability bounding set. "
2199 "This provides semantics that are the same as those provided by traditional "
2202 "上記のルールにケーパビリティ変換を適用した結果をまとめると、 プロセスが set-"
2203 "user-ID-root プログラムを B<execve>(2) する場合、または実効 UID が 0 のプロ"
2204 "セスがプログラムを B<execve>(2) する場合、許可と実効のケーパビリティセットの"
2205 "全ケーパビリティ (正確には、ケーパビリティバウンディングセットによるマスクで"
2206 "除外されるもの 以外の全てのケーパビリティ) を取得するということである。 これ"
2207 "により、伝統的な UNIX システムと同じ振る舞いができるようになっている。"
2210 #: build/C/man7/capabilities.7:724
2212 msgid "Capability bounding set"
2213 msgstr "ケーパビリティ・バウンディングセット"
2216 #: build/C/man7/capabilities.7:729
2218 "The capability bounding set is a security mechanism that can be used to "
2219 "limit the capabilities that can be gained during an B<execve>(2). The "
2220 "bounding set is used in the following ways:"
2222 "ケーパビリティ・バウンディングセット (capability bounding set) は、 B<execve>"
2223 "(2) 時に獲得できるケーパビリティを制限するために使われる セキュリティ機構で"
2224 "ある。 バウンディングセットは以下のように使用される。"
2227 #: build/C/man7/capabilities.7:737
2229 "During an B<execve>(2), the capability bounding set is ANDed with the file "
2230 "permitted capability set, and the result of this operation is assigned to "
2231 "the thread's permitted capability set. The capability bounding set thus "
2232 "places a limit on the permitted capabilities that may be granted by an "
2235 "B<execve>(2) 実行時に、ケーパビリティ・バウンディングセットと ファイルの許可"
2236 "ケーパビリティセットの論理和 (AND) を取ったものが、 そのスレッドの許可ケーパ"
2237 "ビリティセットに割り当てられる。 つまり、ケーパビリティ・バウンディングセット"
2238 "は、 実行ファイルが認めている許可ケーパビリティに対して 制限を課す働きをす"
2242 #: build/C/man7/capabilities.7:749
2244 "(Since Linux 2.6.25) The capability bounding set acts as a limiting "
2245 "superset for the capabilities that a thread can add to its inheritable set "
2246 "using B<capset>(2). This means that if a capability is not in the bounding "
2247 "set, then a thread can't add this capability to its inheritable set, even if "
2248 "it was in its permitted capabilities, and thereby cannot have this "
2249 "capability preserved in its permitted set when it B<execve>(2)s a file that "
2250 "has the capability in its inheritable set."
2252 "(Linux 2.6.25 以降) ケーパビリティ・バウンディングセットは、スレッドが "
2253 "B<capset>(2) により自身の継承可能セットに追加可能なケーパビリティの母集団を "
2254 "制限する役割を持つ。 スレッドに許可されたケーパビリティであっても、バウンディ"
2255 "ングセットに 含まれていなければ、スレッドはそのケーパビリティは自身の継承可能"
2256 "セットに 追加できず、その結果、継承可能セットにそのケーパビリティを含むファイ"
2257 "ルを B<execve>(2) する場合、そのケーパビリティを許可セットに持ち続けることが"
2261 #: build/C/man7/capabilities.7:756
2263 "Note that the bounding set masks the file permitted capabilities, but not "
2264 "the inherited capabilities. If a thread maintains a capability in its "
2265 "inherited set that is not in its bounding set, then it can still gain that "
2266 "capability in its permitted set by executing a file that has the capability "
2267 "in its inherited set."
2269 "バウンディングセットがマスクを行うのは、継承可能ケーパビリティではなく、 ファ"
2270 "イルの許可ケーパビリティのマスクを行う点に注意すること。 あるスレッドの継承可"
2271 "能セットにそのスレッドのバウンディングセットに 存在しないケーパビリティが含ま"
2272 "れている場合、そのスレッドは、 継承可能セットに含まれるケーパビリティを持つ"
2273 "ファイルを実行することにより、 許可セットに含まれるケーパビリティも獲得できる"
2277 #: build/C/man7/capabilities.7:759
2279 "Depending on the kernel version, the capability bounding set is either a "
2280 "system-wide attribute, or a per-process attribute."
2282 "カーネルのバージョンにより、ケーパビリティ・バウンディングセットは システム共"
2283 "通の属性の場合と、プロセス単位の属性の場合がある。"
2286 #: build/C/man7/capabilities.7:761
2287 msgid "B<Capability bounding set prior to Linux 2.6.25>"
2288 msgstr "B<Linux 2.6.25 より前のケーパビリティ・バウンディングセット>"
2291 #: build/C/man7/capabilities.7:769
2293 "In kernels before 2.6.25, the capability bounding set is a system-wide "
2294 "attribute that affects all threads on the system. The bounding set is "
2295 "accessible via the file I</proc/sys/kernel/cap-bound>. (Confusingly, this "
2296 "bit mask parameter is expressed as a signed decimal number in I</proc/sys/"
2297 "kernel/cap-bound>.)"
2299 "2.6.25 より前のカーネルでは、ケーパビリティ・バウンディングセットは システム"
2300 "共通の属性で、システム上の全てのスレッドに適用される。 バウンディングセット"
2301 "は I</proc/sys/kernel/cap-bound> ファイル経由で参照できる。 (間違えやすいが、"
2302 "このビットマスク形式のパラメータは、 I</proc/sys/kernel/cap-bound> では符号付"
2306 #: build/C/man7/capabilities.7:776
2308 "Only the B<init> process may set capabilities in the capability bounding "
2309 "set; other than that, the superuser (more precisely: programs with the "
2310 "B<CAP_SYS_MODULE> capability) may only clear capabilities from this set."
2312 "B<init> プロセスだけがケーパビリティ・バウンディングセットで ケーパビリティを"
2313 "セットすることができる。 それ以外では、スーパーユーザ (より正確には、 "
2314 "B<CAP_SYS_MODULE> ケーパビリティを持ったプログラム) が、 ケーパビリティ・バウ"
2315 "ンディングセットのケーパビリティのクリアが できるだけである。"
2318 #: build/C/man7/capabilities.7:785
2320 "On a standard system the capability bounding set always masks out the "
2321 "B<CAP_SETPCAP> capability. To remove this restriction (dangerous!), modify "
2322 "the definition of B<CAP_INIT_EFF_SET> in I<include/linux/capability.h> and "
2323 "rebuild the kernel."
2325 "通常のシステムでは、ケーパビリティ・バウンディングセットは、 B<CAP_SETPCAP> "
2326 "が無効になっている。 この制限を取り去るには (取り去るのは危険!)、 I<include/"
2327 "linux/capability.h> 内の B<CAP_INIT_EFF_SET> の定義を修正し、カーネルを再構築"
2331 #: build/C/man7/capabilities.7:789
2333 "The system-wide capability bounding set feature was added to Linux starting "
2334 "with kernel version 2.2.11."
2336 "システム共通のケーパビリティ・バウンディングセット機能は、 カーネル 2.2.11 以"
2340 #: build/C/man7/capabilities.7:791
2341 msgid "B<Capability bounding set from Linux 2.6.25 onward>"
2342 msgstr "B<Linux 2.6.25 以降のケーパビリティ・バウンディングセット>"
2345 #: build/C/man7/capabilities.7:796
2347 "From Linux 2.6.25, the I<capability bounding set> is a per-thread "
2348 "attribute. (There is no longer a system-wide capability bounding set.)"
2350 "Linux 2.6.25 以降では、 「ケーパビリティ・バウンディングセット」はスレッド単"
2351 "位の属性である (システム共通のケーパビリティ・バウンディングセットはもはや存"
2355 #: build/C/man7/capabilities.7:801
2357 "The bounding set is inherited at B<fork>(2) from the thread's parent, and "
2358 "is preserved across an B<execve>(2)."
2360 "バウンディングセットは B<fork>(2) 時にはスレッドの親プロセスから継承され、 "
2361 "B<execve>(2) の前後では保持される。"
2364 #: build/C/man7/capabilities.7:814
2366 "A thread may remove capabilities from its capability bounding set using the "
2367 "B<prctl>(2) B<PR_CAPBSET_DROP> operation, provided it has the "
2368 "B<CAP_SETPCAP> capability. Once a capability has been dropped from the "
2369 "bounding set, it cannot be restored to that set. A thread can determine if "
2370 "a capability is in its bounding set using the B<prctl>(2) "
2371 "B<PR_CAPBSET_READ> operation."
2373 "スレッドが B<CAP_SETPCAP> ケーパビリティを持っている場合、そのスレッドは "
2374 "B<prctl>(2) の B<PR_CAPBSET_DROP> 操作を使って自身のケーパビリティ・バウン"
2375 "ディングセットから ケーパビリティを削除することができる。 いったんケーパビリ"
2376 "ティをバウンディングセットから削除してしまうと、 スレッドはそのケーパビリティ"
2377 "を再度セットすることはできない。 B<prctl>(2) の B<PR_CAPBSET_READ> 操作を使"
2378 "うことで、スレッドがあるケーパビリティが自身のバウンディングセット に含まれて"
2382 #: build/C/man7/capabilities.7:832
2385 #| "Removing capabilities from the bounding set is only supported if file "
2386 #| "capabilities are compiled into the kernel "
2387 #| "(CONFIG_SECURITY_FILE_CAPABILITIES). In that case, the B<init> process "
2388 #| "(the ancestor of all processes) begins with a full bounding set. If file "
2389 #| "capabilities are not compiled into the kernel, then B<init> begins with a "
2390 #| "full bounding set minus B<CAP_SETPCAP>, because this capability has a "
2391 #| "different meaning when there are no file capabilities."
2393 "Removing capabilities from the bounding set is only supported if file "
2394 "capabilities are compiled into the kernel. In kernels before Linux 2.6.33, "
2395 "file capabilities were an optional feature configurable via the "
2396 "CONFIG_SECURITY_FILE_CAPABILITIES option. Since Linux 2.6.33, the "
2397 "configuration option has been removed and file capabilities are always part "
2398 "of the kernel. When file capabilities are compiled into the kernel, the "
2399 "B<init> process (the ancestor of all processes) begins with a full bounding "
2400 "set. If file capabilities are not compiled into the kernel, then B<init> "
2401 "begins with a full bounding set minus B<CAP_SETPCAP>, because this "
2402 "capability has a different meaning when there are no file capabilities."
2404 "バウンディングセットからのケーパビリティの削除がサポートされるのは、 カーネル"
2405 "のコンパイル時にファイルケーパビリティが有効になっている場合 "
2406 "(CONFIG_SECURITY_FILE_CAPABILITIES) だけである。 この場合には、 (全てのプロセ"
2407 "スの先祖である) I<init> プロセスはバウンディングセットで全てのケーパビリティ"
2408 "が セットされた状態で開始する。 ファイルケーパビリティが有効になっていない場"
2409 "合には、 I<init> はバウンディングセットで B<CAP_SETPCAP> 以外の全てのケーパビ"
2410 "リティがセットされた状態で開始する。 このようになっているのは、 "
2411 "B<CAP_SETPCAP> ケーパビリティがファイルケーパビリティがサポートされていない場"
2412 "合には 違った意味を持つからである。"
2415 #: build/C/man7/capabilities.7:839
2417 "Removing a capability from the bounding set does not remove it from the "
2418 "thread's inherited set. However it does prevent the capability from being "
2419 "added back into the thread's inherited set in the future."
2421 "バウンディングセットからケーパビリティを削除しても、 スレッドの継承可能セット"
2422 "からはそのケーパビリティは削除されない。 しかしながら、バウンディングセットか"
2423 "らの削除により、 この先そのケーパビリティをスレッドの継承可能セットに追加する"
2427 #: build/C/man7/capabilities.7:839
2429 msgid "Effect of User ID Changes on Capabilities"
2430 msgstr "ユーザ ID 変更のケーパビリティへの影響"
2433 #: build/C/man7/capabilities.7:848
2435 "To preserve the traditional semantics for transitions between 0 and nonzero "
2436 "user IDs, the kernel makes the following changes to a thread's capability "
2437 "sets on changes to the thread's real, effective, saved set, and file system "
2438 "user IDs (using B<setuid>(2), B<setresuid>(2), or similar):"
2440 "ユーザ ID が 0 と 0 以外の間で変化する際の振る舞いを従来と同じにするため、 ス"
2441 "レッドの実 UID、実効 UID、保存 set-user-ID、ファイルシステム UID が "
2442 "(B<setuid>(2), B<setresuid>(2) などを使って) 変更された際に、カーネルはその"
2443 "スレッドのケーパビリティセットに 以下の変更を行う:"
2446 #: build/C/man7/capabilities.7:854
2448 "If one or more of the real, effective or saved set user IDs was previously "
2449 "0, and as a result of the UID changes all of these IDs have a nonzero value, "
2450 "then all capabilities are cleared from the permitted and effective "
2453 "UID の変更前には実 UID、実効 UID、保存 set-user-ID のうち 少なくとも一つが 0 "
2454 "で、変更後に実 UID、実効 UID、保存 set-user-ID が すべて 0 以外の値になった場"
2455 "合、許可と実効のケーパビリティセットの 全ケーパビリティをクリアする。"
2458 #: build/C/man7/capabilities.7:857
2460 "If the effective user ID is changed from 0 to nonzero, then all capabilities "
2461 "are cleared from the effective set."
2463 "実効 UID が 0 から 0 以外に変更された場合、 実効ケーパビリティセットの全ケー"
2467 #: build/C/man7/capabilities.7:860
2469 "If the effective user ID is changed from nonzero to 0, then the permitted "
2470 "set is copied to the effective set."
2472 "実効 UID が 0 以外から 0 に変更された場合、 許可ケーパビリティセットの内容を"
2473 "実効ケーパビリティセットにコピーする。"
2476 #: build/C/man7/capabilities.7:860 build/C/man7/capabilities.7:915
2482 #: build/C/man7/capabilities.7:878
2484 "If the file system user ID is changed from 0 to nonzero (see B<setfsuid>"
2485 "(2)) then the following capabilities are cleared from the effective set: "
2486 "B<CAP_CHOWN>, B<CAP_DAC_OVERRIDE>, B<CAP_DAC_READ_SEARCH>, B<CAP_FOWNER>, "
2487 "B<CAP_FSETID>, B<CAP_LINUX_IMMUTABLE> (since Linux 2.2.30), "
2488 "B<CAP_MAC_OVERRIDE>, and B<CAP_MKNOD> (since Linux 2.2.30). If the file "
2489 "system UID is changed from nonzero to 0, then any of these capabilities that "
2490 "are enabled in the permitted set are enabled in the effective set."
2492 "ファイルシステム UID が 0 から 0 以外に変更された場合 (B<setfsuid>(2) 参"
2493 "照)、実効ケーパビリティセットの以下のケーパビリティがクリアされる: "
2494 "B<CAP_CHOWN>, B<CAP_DAC_OVERRIDE>, B<CAP_DAC_READ_SEARCH>, B<CAP_FOWNER>, "
2495 "B<CAP_FSETID>, B<CAP_LINUX_IMMUTABLE> (Linux 2.2.30 以降), "
2496 "B<CAP_MAC_OVERRIDE>, B<CAP_MKNOD> (Linux 2.2.30 以降)。 ファイルシステム UID "
2497 "が 0 以外から 0 に変更された場合、 上記のケーパビリティのうち許可ケーパビリ"
2498 "ティセットで有効になっているものが 実効ケーパビリティセットで有効にされる。"
2501 #: build/C/man7/capabilities.7:886
2503 "If a thread that has a 0 value for one or more of its user IDs wants to "
2504 "prevent its permitted capability set being cleared when it resets all of its "
2505 "user IDs to nonzero values, it can do so using the B<prctl>(2) "
2506 "B<PR_SET_KEEPCAPS> operation."
2508 "各種 UID のうち少なくとも一つが 0 であるスレッドが、 その UID の全てが 0 以外"
2509 "になったときに許可ケーパビリティセットが クリアされないようにしたい場合に"
2510 "は、 B<prctl>(2) の B<PR_SET_KEEPCAPS> 操作を使えばよい。"
2513 #: build/C/man7/capabilities.7:886
2515 msgid "Programmatically adjusting capability sets"
2516 msgstr "プログラムでケーパビリティセットを調整する"
2519 #: build/C/man7/capabilities.7:901
2521 "A thread can retrieve and change its capability sets using the B<capget>(2) "
2522 "and B<capset>(2) system calls. However, the use of B<cap_get_proc>(3) and "
2523 "B<cap_set_proc>(3), both provided in the I<libcap> package, is preferred for "
2524 "this purpose. The following rules govern changes to the thread capability "
2527 "各スレッドは、 B<capget>(2) や B<capset>(2) を使って、自身のケーパビリティ"
2528 "セットを取得したり変更したりできる。 ただし、これを行うには、 I<libcap> パッ"
2529 "ケージで提供されている B<cap_get_proc>(3) や B<cap_set_proc>(3) を使うのが"
2530 "望ましい。 スレッドのケーパビリティセットの変更には以下のルールが適用される。"
2533 #: build/C/man7/capabilities.7:907
2535 "If the caller does not have the B<CAP_SETPCAP> capability, the new "
2536 "inheritable set must be a subset of the combination of the existing "
2537 "inheritable and permitted sets."
2539 "呼び出し側が B<CAP_SETPCAP> ケーパビリティを持っていない場合、新しい継承可能"
2540 "セットは、 既存の継承可能セットと許可セットの積集合 (AND) の部分集合で なけれ"
2544 #: build/C/man7/capabilities.7:911
2546 "(Since kernel 2.6.25) The new inheritable set must be a subset of the "
2547 "combination of the existing inheritable set and the capability bounding set."
2549 "(カーネル 2.6.25 以降) 新しい継承可能セットは、既存の継承可能セットとケーパ"
2550 "ビリティ・ バウンディングセットの積集合 (AND) の部分集合でなければならない。"
2553 #: build/C/man7/capabilities.7:915
2555 "The new permitted set must be a subset of the existing permitted set (i.e., "
2556 "it is not possible to acquire permitted capabilities that the thread does "
2557 "not currently have)."
2559 "新しい許可セットは、既存の許可セットの部分集合でなければならない (つまり、そ"
2560 "のスレッドが現在持っていない許可ケーパビリティを 獲得することはできない)。"
2563 #: build/C/man7/capabilities.7:917
2564 msgid "The new effective set must be a subset of the new permitted set."
2566 "新しい実効ケーパビリティセットは新しい許可ケーパビリティセットの 部分集合に"
2570 #: build/C/man7/capabilities.7:917
2572 msgid "The \"securebits\" flags: establishing a capabilities-only environment"
2573 msgstr "securebits フラグ: ケーパビリティだけの環境を構築する"
2575 #. For some background:
2576 #. see http://lwn.net/Articles/280279/ and
2577 #. http://article.gmane.org/gmane.linux.kernel.lsm/5476/
2579 #: build/C/man7/capabilities.7:928
2581 "Starting with kernel 2.6.26, and with a kernel in which file capabilities "
2582 "are enabled, Linux implements a set of per-thread I<securebits> flags that "
2583 "can be used to disable special handling of capabilities for UID 0 "
2584 "(I<root>). These flags are as follows:"
2586 "カーネル 2.6.26 以降で、 ファイルケーパビリティが有効になったカーネルでは、 "
2587 "スレッド単位の I<securebits> フラグが実装されており、このフラグを使うと UID "
2588 "0 (I<root>) に対するケーパビリティの特別扱いを無効することができる。 以下の"
2592 #: build/C/man7/capabilities.7:928
2594 msgid "B<SECBIT_KEEP_CAPS>"
2595 msgstr "B<SECBIT_KEEP_CAPS>"
2598 #: build/C/man7/capabilities.7:940
2600 "Setting this flag allows a thread that has one or more 0 UIDs to retain its "
2601 "capabilities when it switches all of its UIDs to a nonzero value. If this "
2602 "flag is not set, then such a UID switch causes the thread to lose all "
2603 "capabilities. This flag is always cleared on an B<execve>(2). (This flag "
2604 "provides the same functionality as the older B<prctl>(2) B<PR_SET_KEEPCAPS> "
2607 "このフラグをセットされている場合、UID が 0 のスレッドの UID が 0 以外の値に "
2608 "切り替わる際に、そのスレッドはケーパビリティを維持することができる。 このフラ"
2609 "グがセットされていない場合には、UID が 0 から 0 以外の値に 切り替わると、その"
2610 "スレッドは全てのケーパビリティを失う。 このフラグは B<execve>(2) 時には全て"
2611 "クリアされる (このフラグは、以前の B<prctl>(2) の B<PR_SET_KEEPCAPS> 操作と"
2615 #: build/C/man7/capabilities.7:940
2617 msgid "B<SECBIT_NO_SETUID_FIXUP>"
2618 msgstr "B<SECBIT_NO_SETUID_FIXUP>"
2621 #: build/C/man7/capabilities.7:947
2623 "Setting this flag stops the kernel from adjusting capability sets when the "
2624 "threads's effective and file system UIDs are switched between zero and "
2625 "nonzero values. (See the subsection I<Effect of User ID Changes on "
2628 "このフラグをセットすると、スレッドの実効 UID とファイルシステム UID が 0 と "
2629 "0 以外の間で切り替わった場合に、 カーネルはケーパビリティセットの調整を行わな"
2630 "くなる (「ユーザ ID 変更のケーパビリティへの影響」の節を参照)。"
2633 #: build/C/man7/capabilities.7:947
2635 msgid "B<SECBIT_NOROOT>"
2636 msgstr "B<SECBIT_NOROOT>"
2639 #: build/C/man7/capabilities.7:955
2641 "If this bit is set, then the kernel does not grant capabilities when a set-"
2642 "user-ID-root program is executed, or when a process with an effective or "
2643 "real UID of 0 calls B<execve>(2). (See the subsection I<Capabilities and "
2644 "execution of programs by root>.)"
2646 "このビットがセットされている場合、 set-user-ID-root プログラムの実行時や、 実"
2647 "効 UID か 実 UID が 0 のプロセスが B<execve>(2) を呼び出した時に、カーネルは"
2648 "ケーパビリティを許可しない (「ケーパビリティと、ルートによるプログラムの実"
2652 #: build/C/man7/capabilities.7:965
2654 "Each of the above \"base\" flags has a companion \"locked\" flag. Setting "
2655 "any of the \"locked\" flags is irreversible, and has the effect of "
2656 "preventing further changes to the corresponding \"base\" flag. The locked "
2657 "flags are: B<SECBIT_KEEP_CAPS_LOCKED>, B<SECBIT_NO_SETUID_FIXUP_LOCKED>, and "
2658 "B<SECBIT_NOROOT_LOCKED>."
2660 "上記の \"base\" フラグの各々には対応する \"locked\" フラグが存在する。 いずれ"
2661 "の \"locked\" フラグも一度セットされると戻すことはできず、 それ以降は対応す"
2662 "る \"base\" フラグを変更することができなくなる。 \"locked\" フラグは "
2663 "B<SECBIT_KEEP_CAPS_LOCKED>, B<SECBIT_NO_SETUID_FIXUP_LOCKED>, "
2664 "B<SECBIT_NOROOT_LOCKED> という名前である。"
2667 #: build/C/man7/capabilities.7:977
2669 "The I<securebits> flags can be modified and retrieved using the B<prctl>(2) "
2670 "B<PR_SET_SECUREBITS> and B<PR_GET_SECUREBITS> operations. The "
2671 "B<CAP_SETPCAP> capability is required to modify the flags."
2673 "I<securebits> フラグは、 B<prctl>(2) の操作 B<PR_SET_SECUREBITS> や "
2674 "B<PR_GET_SECUREBITS> を使うことで変更したり取得したりできる。 フラグを変更す"
2675 "るには B<CAP_SETPCAP> ケーパビリティが必要である。"
2678 #: build/C/man7/capabilities.7:986
2680 "The I<securebits> flags are inherited by child processes. During an "
2681 "B<execve>(2), all of the flags are preserved, except B<SECBIT_KEEP_CAPS> "
2682 "which is always cleared."
2684 "I<securebits> フラグは子プロセスに継承される。 B<execve>(2) においては、\n"
2685 "B<SECBIT_KEEP_CAPS> が常にクリアされる以外は、全てのフラグが保持される。"
2688 #: build/C/man7/capabilities.7:991
2690 "An application can use the following call to lock itself, and all of its "
2691 "descendants, into an environment where the only way of gaining capabilities "
2692 "is by executing a program with associated file capabilities:"
2694 "アプリケーションは、以下の呼び出しを行うことにより、 自分自身および子孫となる"
2695 "プロセス全てに対して、 必要なファイルケーパビリティを持ったプログラムを実行し"
2696 "ない限り、 対応するケーパビリティを獲得できないような状況に閉じこめることがで"
2700 #: build/C/man7/capabilities.7:1000
2703 "prctl(PR_SET_SECUREBITS,\n"
2704 " SECBIT_KEEP_CAPS_LOCKED |\n"
2705 " SECBIT_NO_SETUID_FIXUP |\n"
2706 " SECBIT_NO_SETUID_FIXUP_LOCKED |\n"
2707 " SECBIT_NOROOT |\n"
2708 " SECBIT_NOROOT_LOCKED);\n"
2710 "prctl(PR_SET_SECUREBITS,\n"
2711 " SECBIT_KEEP_CAPS_LOCKED |\n"
2712 " SECBIT_NO_SETUID_FIXUP |\n"
2713 " SECBIT_NO_SETUID_FIXUP_LOCKED |\n"
2714 " SECBIT_NOROOT |\n"
2715 " SECBIT_NOROOT_LOCKED);\n"
2718 #: build/C/man7/capabilities.7:1007
2720 "No standards govern capabilities, but the Linux capability implementation is "
2721 "based on the withdrawn POSIX.1e draft standard; see I<http://wt.xpilot.org/"
2722 "publications/posix.1e/>."
2724 "ケーパビリティに関する標準はないが、 Linux のケーパビリティは廃案になった "
2725 "POSIX.1e 草案に基づいて実装されている。 I<http://wt.xpilot.org/publications/"
2729 #: build/C/man7/capabilities.7:1011
2731 "Since kernel 2.5.27, capabilities are an optional kernel component, and can "
2732 "be enabled/disabled via the CONFIG_SECURITY_CAPABILITIES kernel "
2733 "configuration option."
2735 "カーネル 2.5.27 以降、ケーパビリティは選択式のカーネルコンポーネント となって"
2736 "おり、カーネル設定オプション CONFIG_SECURITY_CAPABILITIES により有効/無効を切"
2740 #: build/C/man7/capabilities.7:1018
2742 "The I</proc/PID/task/TID/status> file can be used to view the capability "
2743 "sets of a thread. The I</proc/PID/status> file shows the capability sets of "
2744 "a process's main thread."
2746 "I</proc/PID/task/TID/status> ファイルを使うと、スレッドのケーパビリティセット"
2747 "を見ることができる。 I</proc/PID/status> ファイルには、プロセスのメインスレッ"
2748 "ドのケーパビリティセットが表示される。"
2751 #: build/C/man7/capabilities.7:1033
2753 "The I<libcap> package provides a suite of routines for setting and getting "
2754 "capabilities that is more comfortable and less likely to change than the "
2755 "interface provided by B<capset>(2) and B<capget>(2). This package also "
2756 "provides the B<setcap>(8) and B<getcap>(8) programs. It can be found at"
2758 "I<libcap> パッケージは、ケーパビリティを設定・取得するための ルーチン群を提供"
2759 "している。これらのインタフェースは、 B<capset>(2) と B<capget>(2) が提供す"
2760 "るインターフェースと比べて、より使いやすく、変更される可能性が少ない。 この"
2761 "パッケージでは、 B<setcap>(8), B<getcap>(8) というプログラムも提供されてい"
2762 "る。 パッケージは以下で入手できる。"
2765 #: build/C/man7/capabilities.7:1035
2766 msgid "I<http://www.kernel.org/pub/linux/libs/security/linux-privs>."
2767 msgstr "I<http://www.kernel.org/pub/linux/libs/security/linux-privs>"
2770 #: build/C/man7/capabilities.7:1044
2772 "Before kernel 2.6.24, and since kernel 2.6.24 if file capabilities are not "
2773 "enabled, a thread with the B<CAP_SETPCAP> capability can manipulate the "
2774 "capabilities of threads other than itself. However, this is only "
2775 "theoretically possible, since no thread ever has B<CAP_SETPCAP> in either of "
2778 "バージョン 2.6.24 より前、およびファイルケーパビリティが 有効になっていない"
2779 "2.6.24 以降のカーネルでは、 B<CAP_SETPCAP> ケーパビリティを持ったスレッドは自"
2780 "分以外のスレッドの ケーパビリティを操作できる。 しかしながら、これは理論的に"
2781 "可能というだけである。 以下のいずれかの場合においても、どのスレッドも "
2782 "B<CAP_SETPCAP> ケーパビリティを持つことはないからである。"
2785 #: build/C/man7/capabilities.7:1049
2787 "In the pre-2.6.25 implementation the system-wide capability bounding set, I</"
2788 "proc/sys/kernel/cap-bound>, always masks out this capability, and this can "
2789 "not be changed without modifying the kernel source and rebuilding."
2791 "2.6.25 より前の実装では、システム共通のケーパビリティ・バウンディングセット "
2792 "I</proc/sys/kernel/cap-bound> ではこのケーパビリティは常に無効になっており、 "
2793 "ソースを変更してカーネルを再コンパイルしない限り、 これを変更することはできな"
2797 #: build/C/man7/capabilities.7:1055
2799 "If file capabilities are disabled in the current implementation, then "
2800 "B<init> starts out with this capability removed from its per-process "
2801 "bounding set, and that bounding set is inherited by all other processes "
2802 "created on the system."
2804 "現在の実装ではファイルケーパビリティが無効になっている場合、 プロセス毎のバウ"
2805 "ンディングセットからこのケーパビリティを抜いて B<init> は開始され、 システム"
2806 "上で生成される他の全てのプロセスでこのバウンディングセットが 継承される。"
2809 #: build/C/man7/capabilities.7:1072
2811 "B<capget>(2), B<prctl>(2), B<setfsuid>(2), B<cap_clear>(3), B<cap_copy_ext>"
2812 "(3), B<cap_from_text>(3), B<cap_get_file>(3), B<cap_get_proc>(3), B<cap_init>"
2813 "(3), B<capgetp>(3), B<capsetp>(3), B<libcap>(3), B<credentials>(7), "
2814 "B<pthreads>(7), B<getcap>(8), B<setcap>(8)"
2816 "B<capget>(2), B<prctl>(2), B<setfsuid>(2), B<cap_clear>(3),\n"
2817 "B<cap_copy_ext>(3), B<cap_from_text>(3), B<cap_get_file>(3),\n"
2818 "B<cap_get_proc>(3), B<cap_init>(3), B<capgetp>(3), B<capsetp>(3),\n"
2819 "B<libcap>(3), B<credentials>(7), B<pthreads>(7), B<getcap>(8), B<setcap>(8)"
2822 #: build/C/man7/capabilities.7:1076
2824 "Comments on the purposes of various capabilities in I<include/linux/"
2825 "capability.h> in the kernel source"
2827 "カーネルソース内の I<include/linux/capability.h> に\n"
2828 "各種のケーパビリティの目的についてのコメント"
2831 #: build/C/man2/capget.2:11
2837 #: build/C/man2/capget.2:11
2843 #: build/C/man2/capget.2:14
2844 msgid "capget, capset - set/get capabilities of thread(s)"
2845 msgstr "capget, capset - スレッドのケーパビリティを設定/取得する"
2848 #: build/C/man2/capget.2:16
2849 msgid "B<#include E<lt>sys/capability.hE<gt>>"
2850 msgstr "B<#include E<lt>sys/capability.hE<gt>>"
2853 #: build/C/man2/capget.2:18
2855 "B<int capget(cap_user_header_t >I<hdrp>B<, cap_user_data_t >I<datap>B<);>"
2857 "B<int capget(cap_user_header_t >I<hdrp>B<, cap_user_data_t >I<datap>B<);>"
2860 #: build/C/man2/capget.2:20
2862 "B<int capset(cap_user_header_t >I<hdrp>B<, const cap_user_data_t "
2865 "B<int capset(cap_user_header_t >I<hdrp>B<, const cap_user_data_t "
2869 #: build/C/man2/capget.2:31
2871 "As of Linux 2.2, the power of the superuser (root) has been partitioned into "
2872 "a set of discrete capabilities. Each thread has a set of effective "
2873 "capabilities identifying which capabilities (if any) it may currently "
2874 "exercise. Each thread also has a set of inheritable capabilities that may "
2875 "be passed through an B<execve>(2) call, and a set of permitted capabilities "
2876 "that it can make effective or inheritable."
2878 "Linux 2.2 で、スーパーユーザー (root) の権限は、個別のケーパビリティ "
2879 "(capabilities) へと分割され、その集合として表現されるようになった。 各スレッ"
2880 "ドは「実効ケーパビリティ (effective capability) の集合」を持ち、 それによって"
2881 "現在どの操作が実行可能かを識別できる。 また、各スレッドは、 「継承可能ケーパ"
2882 "ビリティ (inheritable capability) の集合」と 「許可ケーパビリティ (permitted "
2883 "capability) の集合」を持つ。 「継承可能ケーパビリティの集合」は B<execve>"
2884 "(2) を通じて渡すことができるケーパビリティの集合であり、 「許可ケーパビリ"
2885 "ティ (permitted capability) の集合」は 実効ケーパビリティや継承可能ケーパビリ"
2886 "ティとして有効にできる ケーパビリティを規定するものである。"
2889 #: build/C/man2/capget.2:40
2891 "These two functions are the raw kernel interface for getting and setting "
2892 "thread capabilities. Not only are these system calls specific to Linux, but "
2893 "the kernel API is likely to change and use of these functions (in particular "
2894 "the format of the I<cap_user_*_t> types) is subject to extension with each "
2895 "kernel revision, but old programs will keep working."
2897 "この二つの関数はスレッドのケーパビリティを取得したり設定したりするための 生の"
2898 "カーネルインターフェースである。 これらのシステムコールは Linux 特有であると"
2899 "いうだけでなく、 カーネル API は変更されるかもしれず、これらの 関数の使用法 "
2900 "(特に I<cap_user_*_t> 型という書式) はカーネルのリビジョン毎に拡張されるかも"
2901 "しれないが、 以前のプログラムはそのまま動作する。"
2904 #: build/C/man2/capget.2:51
2906 "The portable interfaces are B<cap_set_proc>(3) and B<cap_get_proc>(3); if "
2907 "possible you should use those interfaces in applications. If you wish to "
2908 "use the Linux extensions in applications, you should use the easier-to-use "
2909 "interfaces B<capsetp>(3) and B<capgetp>(3)."
2911 "移植性のあるインターフェースは B<cap_set_proc>(3) と B<cap_get_proc>(3) で"
2912 "ある。 可能ならばアプリケーションはこれらの関数を使用すべきである。 アプリ"
2913 "ケーションに Linux 拡張を使用したい場合には、より簡単に 使えるインターフェー"
2914 "スである B<capsetp>(3) と B<capgetp>(3) を使用すべきである。"
2917 #: build/C/man2/capget.2:51
2919 msgid "Current details"
2923 #: build/C/man2/capget.2:54
2925 "Now that you have been warned, some current kernel details. The structures "
2926 "are defined as follows."
2928 "現在のカーネルの詳細について注意を述べておく。 構造体は以下のように定義され"
2932 #: build/C/man2/capget.2:59
2935 "#define _LINUX_CAPABILITY_VERSION_1 0x19980330\n"
2936 "#define _LINUX_CAPABILITY_U32S_1 1\n"
2938 "#define _LINUX_CAPABILITY_VERSION_1 0x19980330\n"
2939 "#define _LINUX_CAPABILITY_U32S_1 1\n"
2942 #: build/C/man2/capget.2:62
2945 "#define _LINUX_CAPABILITY_VERSION_2 0x20071026\n"
2946 "#define _LINUX_CAPABILITY_U32S_2 2\n"
2948 "#define _LINUX_CAPABILITY_VERSION_2 0x20071026\n"
2949 "#define _LINUX_CAPABILITY_U32S_2 2\n"
2952 #: build/C/man2/capget.2:67
2955 "typedef struct __user_cap_header_struct {\n"
2958 "} *cap_user_header_t;\n"
2960 "typedef struct __user_cap_header_struct {\n"
2963 "} *cap_user_header_t;\n"
2966 #: build/C/man2/capget.2:73
2969 "typedef struct __user_cap_data_struct {\n"
2970 " __u32 effective;\n"
2971 " __u32 permitted;\n"
2972 " __u32 inheritable;\n"
2973 "} *cap_user_data_t;\n"
2975 "typedef struct __user_cap_data_struct {\n"
2976 " __u32 effective;\n"
2977 " __u32 permitted;\n"
2978 " __u32 inheritable;\n"
2979 "} *cap_user_data_t;\n"
2982 #: build/C/man2/capget.2:88
2984 "I<effective, permitted, inheritable> are bitmasks of the capabilities "
2985 "defined in I<capability(7).> Note the I<CAP_*> values are bit indexes and "
2986 "need to be bit-shifted before ORing into the bit fields. To define the "
2987 "structures for passing to the system call you have to use the I<struct "
2988 "__user_cap_header_struct> and I<struct __user_cap_data_struct> names because "
2989 "the typedefs are only pointers."
2991 "I<effective, permitted, inheritable> は、 B<capability>(7) で定義されるケー"
2992 "パビリティのビットマスクである。 I<CAP_*> はビット番号を表すインデックス値で"
2993 "あり、 ビットフィールドに OR を行う前に I<CAP_*> の値の分だけビットシフトを行"
2994 "う必要がある。 typedef の方はポインタなので、 このシステムコールに渡す構造体"
2995 "を定義するには、 I<struct __user_cap_header_struct> と I<struct "
2996 "__user_cap_data_struct> という名前を使用しなければならない。"
2999 #: build/C/man2/capget.2:100
3001 "Kernels prior to 2.6.25 prefer 32-bit capabilities with version "
3002 "B<_LINUX_CAPABILITY_VERSION_1>, and kernels 2.6.25+ prefer 64-bit "
3003 "capabilities with version B<_LINUX_CAPABILITY_VERSION_2>. Note, 64-bit "
3004 "capabilities use I<datap>[0] and I<datap>[1], whereas 32-bit capabilities "
3005 "use only I<datap>[0]."
3007 "カーネル 2.6.25 より前では、バージョン B<_LINUX_CAPABILITY_VERSION_1> の 32 "
3008 "ビットケーパビリティが推奨である。 カーネル 2.6.25 以降では、バージョン "
3009 "B<_LINUX_CAPABILITY_VERSION_2> の 64 ビットケーパビリティが推奨である。 64 "
3010 "ビットケーパビリティでは I<datap>[0] と I<datap>[1] が使用されるのに対し、 "
3011 "32 ビットケーパビリティでは I<datap>[0] だけが使用される。"
3014 #: build/C/man2/capget.2:104
3016 "Another change affecting the behavior of these system calls is kernel "
3017 "support for file capabilities (VFS capability support). This support is "
3018 "currently a compile time option (added in kernel 2.6.24)."
3020 "これらのシステムコールの挙動に影響があるもう一つの変更点は、 ファイルケーパビ"
3021 "リティ (file capabilities) のカーネルによるサポート (VFS ケーパビリティのサ"
3022 "ポート) である。 VFS ケーパビリティのサポートは現在のところコンパイル時のオプ"
3023 "ションである (カーネル 2.6.24 で追加された)。"
3026 #: build/C/man2/capget.2:111
3028 "For B<capget>() calls, one can probe the capabilities of any process by "
3029 "specifying its process ID with the I<hdrp-E<gt>pid> field value."
3031 "B<capget>() では、 I<hdrp-E<gt>pid> のフィールド値にケーパビリティを知りたい"
3032 "プロセスのプロセス ID を 指定することで、任意のプロセスのケーパビリティを調べ"
3036 #: build/C/man2/capget.2:111
3038 msgid "With VFS Capability Support"
3039 msgstr "VFS ケーパビリティがサポートされている場合"
3042 #: build/C/man2/capget.2:123
3044 "VFS Capability support creates a file-attribute method for adding "
3045 "capabilities to privileged executables. This privilege model obsoletes "
3046 "kernel support for one process asynchronously setting the capabilities of "
3047 "another. That is, with VFS support, for B<capset>() calls the only "
3048 "permitted values for I<hdrp-E<gt>pid> are 0 or B<getpid>(2), which are "
3051 "VFS ケーパビリティのサポートでは、特権実行ファイルにケーパビリティを 追加する"
3052 "ためのファイル属性メソッドが作成された。 この特権モデルの導入により、あるプロ"
3053 "セスにより別のプロセスのケーパビリティ を非同期に設定する機能のカーネルによる"
3054 "サポートは廃止される。 つまり、VFS サポートでは、 B<capset>() を呼び出す際"
3055 "に I<hdrp-E<gt>pid> の値として許されるのは 0 と B<getpid>(2) が返す値だけと"
3056 "なる (どちらの値でも等価である)。"
3059 #: build/C/man2/capget.2:123
3061 msgid "Without VFS Capability Support"
3062 msgstr "VFS ケーパビリティがサポートされていない場合"
3065 #: build/C/man2/capget.2:149
3067 "When the kernel does not support VFS capabilities, B<capset>() calls can "
3068 "operate on the capabilities of the thread specified by the I<pid> field of "
3069 "I<hdrp> when that is nonzero, or on the capabilities of the calling thread "
3070 "if I<pid> is 0. If I<pid> refers to a single-threaded process, then I<pid> "
3071 "can be specified as a traditional process ID; operating on a thread of a "
3072 "multithreaded process requires a thread ID of the type returned by B<gettid>"
3073 "(2). For B<capset>(), I<pid> can also be: -1, meaning perform the change on "
3074 "all threads except the caller and B<init>(8); or a value less than -1, in "
3075 "which case the change is applied to all members of the process group whose "
3078 "カーネルが VFS ケーパビリティをサポートしていない場合、 I<hdrp> の I<pid> "
3079 "フィールドが 0 以外であれば、 B<capset>() の操作対象は I<pid> で指定されたス"
3080 "レッドのケーパビリティになる。 I<pid> が 0 の場合は呼び出し元のスレッドのケー"
3081 "パビリティが操作対象となる。 I<pid> がシングルスレッド・プロセスを参照してい"
3082 "る場合、 I<pid> は以前から使われているプロセスID を使って指定できる。 マルチ"
3083 "スレッド・プロセス内のあるスレッドを対象にする場合は、 B<gettid>(2) が返すス"
3084 "レッドID を用いて指定する必要がある。 また、 B<capset>() では -1 や -1 より"
3085 "小さな値を指定することもできる。 -1 は呼び出し元と B<init>(8) を除く全てのス"
3086 "レッドを対象として変更を行うことを、 -1 より小さな値は ID が -I<pid> のプロセ"
3087 "スグループの全メンバ を対象として変更を行うことを意味する。"
3090 #: build/C/man2/capget.2:152
3091 msgid "For details on the data, see B<capabilities>(7)."
3092 msgstr "このデータの詳細は B<capabilities>(7) を参照すること。"
3095 #: build/C/man2/capget.2:171
3097 "The calls will fail with the error B<EINVAL>, and set the I<version> field "
3098 "of I<hdrp> to the kernel preferred value of B<_LINUX_CAPABILITY_VERSION_?> "
3099 "when an unsupported I<version> value is specified. In this way, one can "
3100 "probe what the current preferred capability revision is."
3102 "I<hdrp> のフィールド I<version> にサポートされていない値が指定された場合、 呼"
3103 "び出しはエラー B<EINVAL> で失敗し、 I<version> にカーネル推奨の "
3104 "B<_LINUX_CAPABILITY_VERSION_?> を設定する。 このようにして、現在の推奨ケーパ"
3105 "ビリティ・リビジョンが何かを 調べることができる。"
3108 #: build/C/man2/capget.2:180
3110 "Bad memory address. I<hdrp> must not be NULL. I<datap> may be NULL only "
3111 "when the user is trying to determine the preferred capability version format "
3112 "supported by the kernel."
3114 "不正なメモリアドレス。 I<hdrp> は NULL であってはならない。 I<datap> に NULL "
3115 "を指定してよいのは、ユーザがカーネルがサポートしている 推奨のケーパビリティ・"
3116 "バージョンを判定しようとしているときだけである。"
3119 #: build/C/man2/capget.2:180 build/C/man7/cpuset.7:1179
3120 #: build/C/man7/cpuset.7:1188 build/C/man7/cpuset.7:1197
3121 #: build/C/man7/cpuset.7:1207 build/C/man7/cpuset.7:1216
3122 #: build/C/man7/cpuset.7:1223 build/C/man7/cpuset.7:1230
3123 #: build/C/man2/getgroups.2:114 build/C/man2/getgroups.2:121
3124 #: build/C/man2/getpriority.2:119 build/C/man2/getrlimit.2:440
3125 #: build/C/man2/getrusage.2:190 build/C/man2/iopl.2:71
3126 #: build/C/man2/ioprio_set.2:160 build/C/man2/setpgid.2:200
3132 #: build/C/man2/capget.2:183
3133 msgid "One of the arguments was invalid."
3134 msgstr "引き数のどれかが無効である。"
3137 #: build/C/man2/capget.2:188
3139 "An attempt was made to add a capability to the Permitted set, or to set a "
3140 "capability in the Effective or Inheritable sets that is not in the Permitted "
3143 "「許可ケーパビリティセット」にケーパビリティを追加しようとしているか、 もしく"
3144 "は「許可ケーパビリティセット」に含まれないケーパビリティを 「実効ケーパビリ"
3145 "ティセット」や「継承可能ケーパビリティセット」に セットしようとしている。"
3148 #: build/C/man2/capget.2:207
3150 "The caller attempted to use B<capset>() to modify the capabilities of a "
3151 "thread other than itself, but lacked sufficient privilege. For kernels "
3152 "supporting VFS capabilities, this is never permitted. For kernels lacking "
3153 "VFS support, the B<CAP_SETPCAP> capability is required. (A bug in kernels "
3154 "before 2.6.11 meant that this error could also occur if a thread without "
3155 "this capability tried to change its own capabilities by specifying the "
3156 "I<pid> field as a nonzero value (i.e., the value returned by B<getpid>(2)) "
3159 "呼び出し元が自分以外のスレッドのケーパビリティを B<capset>() を使って修正し"
3160 "ようとしたが、十分な特権がなかった。 VFS ケーパビリティをサポートしているカー"
3161 "ネルでは、 この操作が許可されることは決してない。 VFS ケーパビリティをサポー"
3162 "トしていないカーネルでは、 B<CAP_SETPCAP> ケーパビリティが必要である。 (バー"
3163 "ジョン 2.6.11 より前のカーネルには、 このケーパビリティを持たないスレッドが "
3164 "I<pid> フィールドに 0 でない値 (つまり、0 の代わりに B<getpid>(2) が返す値) "
3165 "を指定して自分自身のケーパビリティを変更しようとした場合にも、 このエラーが発"
3169 #: build/C/man2/capget.2:207 build/C/man7/cpuset.7:1329
3170 #: build/C/man2/getpriority.2:127 build/C/man2/getrlimit.2:464
3171 #: build/C/man2/getsid.2:69 build/C/man2/ioprio_set.2:177
3172 #: build/C/man2/setpgid.2:215
3178 #: build/C/man2/capget.2:210
3179 msgid "No such thread."
3180 msgstr "そのようなスレッドが存在しない。"
3183 #: build/C/man2/capget.2:212 build/C/man2/ioprio_set.2:188
3184 msgid "These system calls are Linux-specific."
3185 msgstr "これらのシステムコールは Linux 独自である。"
3188 #: build/C/man2/capget.2:217
3190 "The portable interface to the capability querying and setting functions is "
3191 "provided by the I<libcap> library and is available here:"
3193 "ケーパビリティを設定したり取得したりする機能のための移植性ある インターフェー"
3194 "スは I<libcap> ライブラリによって提供される。 このライブラリは以下から入手で"
3198 #: build/C/man2/capget.2:219
3199 msgid "http://www.kernel.org/pub/linux/libs/security/linux-privs"
3200 msgstr "http://www.kernel.org/pub/linux/libs/security/linux-privs"
3203 #: build/C/man2/capget.2:223
3204 msgid "B<clone>(2), B<gettid>(2), B<capabilities>(7)"
3205 msgstr "B<clone>(2), B<gettid>(2), B<capabilities>(7)"
3208 #: build/C/man7/cpuset.7:24
3214 #: build/C/man7/cpuset.7:24
3220 #: build/C/man7/cpuset.7:27
3221 msgid "cpuset - confine processes to processor and memory node subsets"
3222 msgstr "cpuset - confine processes to processor and memory node subsets"
3225 #: build/C/man7/cpuset.7:34
3227 "The cpuset file system is a pseudo-file-system interface to the kernel "
3228 "cpuset mechanism, which is used to control the processor placement and "
3229 "memory placement of processes. It is commonly mounted at I</dev/cpuset>."
3231 "The cpuset file system is a pseudo-file-system interface to the kernel "
3232 "cpuset mechanism, which is used to control the processor placement and "
3233 "memory placement of processes. It is commonly mounted at I</dev/cpuset>."
3236 #: build/C/man7/cpuset.7:51
3238 "On systems with kernels compiled with built in support for cpusets, all "
3239 "processes are attached to a cpuset, and cpusets are always present. If a "
3240 "system supports cpusets, then it will have the entry B<nodev cpuset> in the "
3241 "file I</proc/filesystems>. By mounting the cpuset file system (see the "
3242 "B<EXAMPLE> section below), the administrator can configure the cpusets on a "
3243 "system to control the processor and memory placement of processes on that "
3244 "system. By default, if the cpuset configuration on a system is not modified "
3245 "or if the cpuset file system is not even mounted, then the cpuset mechanism, "
3246 "though present, has no affect on the system's behavior."
3248 "On systems with kernels compiled with built in support for cpusets, all "
3249 "processes are attached to a cpuset, and cpusets are always present. If a "
3250 "system supports cpusets, then it will have the entry B<nodev cpuset> in the "
3251 "file I</proc/filesystems>. By mounting the cpuset file system (see the "
3252 "B<EXAMPLE> section below), the administrator can configure the cpusets on a "
3253 "system to control the processor and memory placement of processes on that "
3254 "system. By default, if the cpuset configuration on a system is not modified "
3255 "or if the cpuset file system is not even mounted, then the cpuset mechanism, "
3256 "though present, has no affect on the system's behavior."
3259 #: build/C/man7/cpuset.7:53
3260 msgid "A cpuset defines a list of CPUs and memory nodes."
3261 msgstr "A cpuset defines a list of CPUs and memory nodes."
3264 #: build/C/man7/cpuset.7:62
3266 "The CPUs of a system include all the logical processing units on which a "
3267 "process can execute, including, if present, multiple processor cores within "
3268 "a package and Hyper-Threads within a processor core. Memory nodes include "
3269 "all distinct banks of main memory; small and SMP systems typically have just "
3270 "one memory node that contains all the system's main memory, while NUMA (non-"
3271 "uniform memory access) systems have multiple memory nodes."
3273 "The CPUs of a system include all the logical processing units on which a "
3274 "process can execute, including, if present, multiple processor cores within "
3275 "a package and Hyper-Threads within a processor core. Memory nodes include "
3276 "all distinct banks of main memory; small and SMP systems typically have just "
3277 "one memory node that contains all the system's main memory, while NUMA (non-"
3278 "uniform memory access) systems have multiple memory nodes."
3281 #: build/C/man7/cpuset.7:72
3283 "Cpusets are represented as directories in a hierarchical pseudo-file system, "
3284 "where the top directory in the hierarchy (I</dev/cpuset>) represents the "
3285 "entire system (all online CPUs and memory nodes) and any cpuset that is the "
3286 "child (descendant) of another parent cpuset contains a subset of that "
3287 "parent's CPUs and memory nodes. The directories and files representing "
3288 "cpusets have normal file-system permissions."
3290 "Cpusets are represented as directories in a hierarchical pseudo-file system, "
3291 "where the top directory in the hierarchy (I</dev/cpuset>) represents the "
3292 "entire system (all online CPUs and memory nodes) and any cpuset that is the "
3293 "child (descendant) of another parent cpuset contains a subset of that "
3294 "parent's CPUs and memory nodes. The directories and files representing "
3295 "cpusets have normal file-system permissions."
3298 #: build/C/man7/cpuset.7:83
3300 "Every process in the system belongs to exactly one cpuset. A process is "
3301 "confined to only run on the CPUs in the cpuset it belongs to, and to "
3302 "allocate memory only on the memory nodes in that cpuset. When a process "
3303 "B<fork>(2)s, the child process is placed in the same cpuset as its parent. "
3304 "With sufficient privilege, a process may be moved from one cpuset to another "
3305 "and the allowed CPUs and memory nodes of an existing cpuset may be changed."
3307 "Every process in the system belongs to exactly one cpuset. A process is "
3308 "confined to only run on the CPUs in the cpuset it belongs to, and to "
3309 "allocate memory only on the memory nodes in that cpuset. When a process "
3310 "B<fork>(2)s, the child process is placed in the same cpuset as its parent. "
3311 "With sufficient privilege, a process may be moved from one cpuset to another "
3312 "and the allowed CPUs and memory nodes of an existing cpuset may be changed."
3315 #: build/C/man7/cpuset.7:91
3317 "When the system begins booting, a single cpuset is defined that includes all "
3318 "CPUs and memory nodes on the system, and all processes are in that cpuset. "
3319 "During the boot process, or later during normal system operation, other "
3320 "cpusets may be created, as subdirectories of this top cpuset, under the "
3321 "control of the system administrator, and processes may be placed in these "
3324 "When the system begins booting, a single cpuset is defined that includes all "
3325 "CPUs and memory nodes on the system, and all processes are in that cpuset. "
3326 "During the boot process, or later during normal system operation, other "
3327 "cpusets may be created, as subdirectories of this top cpuset, under the "
3328 "control of the system administrator, and processes may be placed in these "
3332 #: build/C/man7/cpuset.7:113
3334 "Cpusets are integrated with the B<sched_setaffinity>(2) scheduling affinity "
3335 "mechanism and the B<mbind>(2) and B<set_mempolicy>(2) memory-placement "
3336 "mechanisms in the kernel. Neither of these mechanisms let a process make "
3337 "use of a CPU or memory node that is not allowed by that process's cpuset. "
3338 "If changes to a process's cpuset placement conflict with these other "
3339 "mechanisms, then cpuset placement is enforced even if it means overriding "
3340 "these other mechanisms. The kernel accomplishes this overriding by silently "
3341 "restricting the CPUs and memory nodes requested by these other mechanisms to "
3342 "those allowed by the invoking process's cpuset. This can result in these "
3343 "other calls returning an error, if for example, such a call ends up "
3344 "requesting an empty set of CPUs or memory nodes, after that request is "
3345 "restricted to the invoking process's cpuset."
3347 "Cpusets are integrated with the B<sched_setaffinity>(2) scheduling affinity "
3348 "mechanism and the B<mbind>(2) and B<set_mempolicy>(2) memory-placement "
3349 "mechanisms in the kernel. Neither of these mechanisms let a process make "
3350 "use of a CPU or memory node that is not allowed by that process's cpuset. "
3351 "If changes to a process's cpuset placement conflict with these other "
3352 "mechanisms, then cpuset placement is enforced even if it means overriding "
3353 "these other mechanisms. The kernel accomplishes this overriding by silently "
3354 "restricting the CPUs and memory nodes requested by these other mechanisms to "
3355 "those allowed by the invoking process's cpuset. This can result in these "
3356 "other calls returning an error, if for example, such a call ends up "
3357 "requesting an empty set of CPUs or memory nodes, after that request is "
3358 "restricted to the invoking process's cpuset."
3361 #: build/C/man7/cpuset.7:119
3363 "Typically, a cpuset is used to manage the CPU and memory-node confinement "
3364 "for a set of cooperating processes such as a batch scheduler job, and these "
3365 "other mechanisms are used to manage the placement of individual processes or "
3366 "memory regions within that set or job."
3368 "Typically, a cpuset is used to manage the CPU and memory-node confinement "
3369 "for a set of cooperating processes such as a batch scheduler job, and these "
3370 "other mechanisms are used to manage the placement of individual processes or "
3371 "memory regions within that set or job."
3374 #: build/C/man7/cpuset.7:119
3380 #: build/C/man7/cpuset.7:124
3382 "Each directory below I</dev/cpuset> represents a cpuset and contains a fixed "
3383 "set of pseudo-files describing the state of that cpuset."
3385 "Each directory below I</dev/cpuset> represents a cpuset and contains a fixed "
3386 "set of pseudo-files describing the state of that cpuset."
3389 #: build/C/man7/cpuset.7:134
3391 "New cpusets are created using the B<mkdir>(2) system call or the B<mkdir>"
3392 "(1) command. The properties of a cpuset, such as its flags, allowed CPUs "
3393 "and memory nodes, and attached processes, are queried and modified by "
3394 "reading or writing to the appropriate file in that cpuset's directory, as "
3397 "New cpusets are created using the B<mkdir>(2) system call or the B<mkdir>"
3398 "(1) command. The properties of a cpuset, such as its flags, allowed CPUs "
3399 "and memory nodes, and attached processes, are queried and modified by "
3400 "reading or writing to the appropriate file in that cpuset's directory, as "
3404 #: build/C/man7/cpuset.7:140
3406 "The pseudo-files in each cpuset directory are automatically created when the "
3407 "cpuset is created, as a result of the B<mkdir>(2) invocation. It is not "
3408 "possible to directly add or remove these pseudo-files."
3410 "The pseudo-files in each cpuset directory are automatically created when the "
3411 "cpuset is created, as a result of the B<mkdir>(2) invocation. It is not "
3412 "possible to directly add or remove these pseudo-files."
3415 #: build/C/man7/cpuset.7:148
3417 "A cpuset directory that contains no child cpuset directories, and has no "
3418 "attached processes, can be removed using B<rmdir>(2) or B<rmdir>(1). It is "
3419 "not necessary, or possible, to remove the pseudo-files inside the directory "
3420 "before removing it."
3422 "A cpuset directory that contains no child cpuset directories, and has no "
3423 "attached processes, can be removed using B<rmdir>(2) or B<rmdir>(1). It is "
3424 "not necessary, or possible, to remove the pseudo-files inside the directory "
3425 "before removing it."
3428 #: build/C/man7/cpuset.7:162
3430 "The pseudo-files in each cpuset directory are small text files that may be "
3431 "read and written using traditional shell utilities such as B<cat>(1), and "
3432 "B<echo>(1), or from a program by using file I/O library functions or system "
3433 "calls, such as B<open>(2), B<read>(2), B<write>(2), and B<close>(2)."
3435 "The pseudo-files in each cpuset directory are small text files that may be "
3436 "read and written using traditional shell utilities such as B<cat>(1), and "
3437 "B<echo>(1), or from a program by using file I/O library functions or system "
3438 "calls, such as B<open>(2), B<read>(2), B<write>(2), and B<close>(2)."
3440 #. ====================== tasks ======================
3442 #: build/C/man7/cpuset.7:167
3444 "The pseudo-files in a cpuset directory represent internal kernel state and "
3445 "do not have any persistent image on disk. Each of these per-cpuset files is "
3446 "listed and described below."
3448 "The pseudo-files in a cpuset directory represent internal kernel state and "
3449 "do not have any persistent image on disk. Each of these per-cpuset files is "
3450 "listed and described below."
3453 #: build/C/man7/cpuset.7:167
3459 #: build/C/man7/cpuset.7:177
3461 "List of the process IDs (PIDs) of the processes in that cpuset. The list is "
3462 "formatted as a series of ASCII decimal numbers, each followed by a newline. "
3463 "A process may be added to a cpuset (automatically removing it from the "
3464 "cpuset that previously contained it) by writing its PID to that cpuset's "
3465 "I<tasks> file (with or without a trailing newline.)"
3467 "List of the process IDs (PIDs) of the processes in that cpuset. The list is "
3468 "formatted as a series of ASCII decimal numbers, each followed by a newline. "
3469 "A process may be added to a cpuset (automatically removing it from the "
3470 "cpuset that previously contained it) by writing its PID to that cpuset's "
3471 "I<tasks> file (with or without a trailing newline.)"
3473 #. =================== notify_on_release ===================
3475 #: build/C/man7/cpuset.7:185
3477 "B<Warning:> only one PID may be written to the I<tasks> file at a time. If "
3478 "a string is written that contains more than one PID, only the first one will "
3481 "B<Warning:> only one PID may be written to the I<tasks> file at a time. If "
3482 "a string is written that contains more than one PID, only the first one will "
3486 #: build/C/man7/cpuset.7:185
3488 msgid "I<notify_on_release>"
3489 msgstr "I<notify_on_release>"
3491 #. ====================== cpus ======================
3493 #: build/C/man7/cpuset.7:194
3495 "Flag (0 or 1). If set (1), that cpuset will receive special handling after "
3496 "it is released, that is, after all processes cease using it (i.e., terminate "
3497 "or are moved to a different cpuset) and all child cpuset directories have "
3498 "been removed. See the B<Notify On Release> section, below."
3500 "Flag (0 or 1). If set (1), that cpuset will receive special handling after "
3501 "it is released, that is, after all processes cease using it (i.e., terminate "
3502 "or are moved to a different cpuset) and all child cpuset directories have "
3503 "been removed. See the B<Notify On Release> section, below."
3506 #: build/C/man7/cpuset.7:194
3512 #: build/C/man7/cpuset.7:201
3514 "List of the physical numbers of the CPUs on which processes in that cpuset "
3515 "are allowed to execute. See B<List Format> below for a description of the "
3516 "format of I<cpus>."
3518 "List of the physical numbers of the CPUs on which processes in that cpuset "
3519 "are allowed to execute. See B<List Format> below for a description of the "
3520 "format of I<cpus>."
3522 #. ==================== cpu_exclusive ====================
3524 #: build/C/man7/cpuset.7:207
3526 "The CPUs allowed to a cpuset may be changed by writing a new list to its "
3529 "The CPUs allowed to a cpuset may be changed by writing a new list to its "
3533 #: build/C/man7/cpuset.7:207
3535 msgid "I<cpu_exclusive>"
3536 msgstr "I<cpu_exclusive>"
3539 #: build/C/man7/cpuset.7:214
3541 "Flag (0 or 1). If set (1), the cpuset has exclusive use of its CPUs (no "
3542 "sibling or cousin cpuset may overlap CPUs). By default this is off (0). "
3543 "Newly created cpusets also initially default this to off (0)."
3545 "Flag (0 or 1). If set (1), the cpuset has exclusive use of its CPUs (no "
3546 "sibling or cousin cpuset may overlap CPUs). By default this is off (0). "
3547 "Newly created cpusets also initially default this to off (0)."
3549 #. ====================== mems ======================
3551 #: build/C/man7/cpuset.7:236
3553 "Two cpusets are I<sibling> cpusets if they share the same parent cpuset in "
3554 "the I</dev/cpuset> hierarchy. Two cpusets are I<cousin> cpusets if neither "
3555 "is the ancestor of the other. Regardless of the I<cpu_exclusive> setting, "
3556 "if one cpuset is the ancestor of another, and if both of these cpusets have "
3557 "nonempty I<cpus>, then their I<cpus> must overlap, because the I<cpus> of "
3558 "any cpuset are always a subset of the I<cpus> of its parent cpuset."
3560 "Two cpusets are I<sibling> cpusets if they share the same parent cpuset in "
3561 "the I</dev/cpuset> hierarchy. Two cpusets are I<cousin> cpusets if neither "
3562 "is the ancestor of the other. Regardless of the I<cpu_exclusive> setting, "
3563 "if one cpuset is the ancestor of another, and if both of these cpusets have "
3564 "nonempty I<cpus>, then their I<cpus> must overlap, because the I<cpus> of "
3565 "any cpuset are always a subset of the I<cpus> of its parent cpuset."
3568 #: build/C/man7/cpuset.7:236
3573 #. ==================== mem_exclusive ====================
3575 #: build/C/man7/cpuset.7:244
3577 "List of memory nodes on which processes in this cpuset are allowed to "
3578 "allocate memory. See B<List Format> below for a description of the format "
3581 "List of memory nodes on which processes in this cpuset are allowed to "
3582 "allocate memory. See B<List Format> below for a description of the format "
3586 #: build/C/man7/cpuset.7:244
3588 msgid "I<mem_exclusive>"
3589 msgstr "I<mem_exclusive>"
3592 #: build/C/man7/cpuset.7:252
3594 "Flag (0 or 1). If set (1), the cpuset has exclusive use of its memory nodes "
3595 "(no sibling or cousin may overlap). Also if set (1), the cpuset is a "
3596 "B<Hardwall> cpuset (see below.) By default this is off (0). Newly created "
3597 "cpusets also initially default this to off (0)."
3599 "Flag (0 or 1). If set (1), the cpuset has exclusive use of its memory nodes "
3600 "(no sibling or cousin may overlap). Also if set (1), the cpuset is a "
3601 "B<Hardwall> cpuset (see below.) By default this is off (0). Newly created "
3602 "cpusets also initially default this to off (0)."
3604 #. ==================== mem_hardwall ====================
3606 #: build/C/man7/cpuset.7:260
3608 "Regardless of the I<mem_exclusive> setting, if one cpuset is the ancestor of "
3609 "another, then their memory nodes must overlap, because the memory nodes of "
3610 "any cpuset are always a subset of the memory nodes of that cpuset's parent "
3613 "Regardless of the I<mem_exclusive> setting, if one cpuset is the ancestor of "
3614 "another, then their memory nodes must overlap, because the memory nodes of "
3615 "any cpuset are always a subset of the memory nodes of that cpuset's parent "
3619 #: build/C/man7/cpuset.7:260
3621 msgid "I<mem_hardwall> (since Linux 2.6.26)"
3622 msgstr "I<mem_hardwall> (since Linux 2.6.26)"
3624 #. ==================== memory_migrate ====================
3626 #: build/C/man7/cpuset.7:271
3628 "Flag (0 or 1). If set (1), the cpuset is a B<Hardwall> cpuset (see below.) "
3629 "Unlike B<mem_exclusive>, there is no constraint on whether cpusets marked "
3630 "B<mem_hardwall> may have overlapping memory nodes with sibling or cousin "
3631 "cpusets. By default this is off (0). Newly created cpusets also initially "
3632 "default this to off (0)."
3634 "Flag (0 or 1). If set (1), the cpuset is a B<Hardwall> cpuset (see below.) "
3635 "Unlike B<mem_exclusive>, there is no constraint on whether cpusets marked "
3636 "B<mem_hardwall> may have overlapping memory nodes with sibling or cousin "
3637 "cpusets. By default this is off (0). Newly created cpusets also initially "
3638 "default this to off (0)."
3641 #: build/C/man7/cpuset.7:271
3643 msgid "I<memory_migrate> (since Linux 2.6.16)"
3644 msgstr "I<memory_migrate> (since Linux 2.6.16)"
3646 #. ==================== memory_pressure ====================
3648 #: build/C/man7/cpuset.7:278
3650 "Flag (0 or 1). If set (1), then memory migration is enabled. By default "
3651 "this is off (0). See the B<Memory Migration> section, below."
3653 "Flag (0 or 1). If set (1), then memory migration is enabled. By default "
3654 "this is off (0). See the B<Memory Migration> section, below."
3657 #: build/C/man7/cpuset.7:278
3659 msgid "I<memory_pressure> (since Linux 2.6.16)"
3660 msgstr "I<memory_pressure> (since Linux 2.6.16)"
3662 #. ================= memory_pressure_enabled =================
3664 #: build/C/man7/cpuset.7:291
3666 "A measure of how much memory pressure the processes in this cpuset are "
3667 "causing. See the B<Memory Pressure> section, below. Unless "
3668 "I<memory_pressure_enabled> is enabled, always has value zero (0). This file "
3669 "is read-only. See the B<WARNINGS> section, below."
3671 "A measure of how much memory pressure the processes in this cpuset are "
3672 "causing. See the B<Memory Pressure> section, below. Unless "
3673 "I<memory_pressure_enabled> is enabled, always has value zero (0). This file "
3674 "is read-only. See the B<WARNINGS> section, below."
3677 #: build/C/man7/cpuset.7:291
3679 msgid "I<memory_pressure_enabled> (since Linux 2.6.16)"
3680 msgstr "I<memory_pressure_enabled> (since Linux 2.6.16)"
3682 #. ================== memory_spread_page ==================
3684 #: build/C/man7/cpuset.7:303
3686 "Flag (0 or 1). This file is only present in the root cpuset, normally I</"
3687 "dev/cpuset>. If set (1), the I<memory_pressure> calculations are enabled "
3688 "for all cpusets in the system. By default this is off (0). See the "
3689 "B<Memory Pressure> section, below."
3691 "Flag (0 or 1). This file is only present in the root cpuset, normally I</"
3692 "dev/cpuset>. If set (1), the I<memory_pressure> calculations are enabled "
3693 "for all cpusets in the system. By default this is off (0). See the "
3694 "B<Memory Pressure> section, below."
3697 #: build/C/man7/cpuset.7:303
3699 msgid "I<memory_spread_page> (since Linux 2.6.17)"
3700 msgstr "I<memory_spread_page> (since Linux 2.6.17)"
3702 #. ================== memory_spread_slab ==================
3704 #: build/C/man7/cpuset.7:313
3706 "Flag (0 or 1). If set (1), pages in the kernel page cache (file-system "
3707 "buffers) are uniformly spread across the cpuset. By default this is off (0) "
3708 "in the top cpuset, and inherited from the parent cpuset in newly created "
3709 "cpusets. See the B<Memory Spread> section, below."
3711 "Flag (0 or 1). If set (1), pages in the kernel page cache (file-system "
3712 "buffers) are uniformly spread across the cpuset. By default this is off (0) "
3713 "in the top cpuset, and inherited from the parent cpuset in newly created "
3714 "cpusets. See the B<Memory Spread> section, below."
3717 #: build/C/man7/cpuset.7:313
3719 msgid "I<memory_spread_slab> (since Linux 2.6.17)"
3720 msgstr "I<memory_spread_slab> (since Linux 2.6.17)"
3722 #. ================== sched_load_balance ==================
3724 #: build/C/man7/cpuset.7:324
3726 "Flag (0 or 1). If set (1), the kernel slab caches for file I/O (directory "
3727 "and inode structures) are uniformly spread across the cpuset. By default "
3728 "this is off (0) in the top cpuset, and inherited from the parent cpuset in "
3729 "newly created cpusets. See the B<Memory Spread> section, below."
3731 "Flag (0 or 1). If set (1), the kernel slab caches for file I/O (directory "
3732 "and inode structures) are uniformly spread across the cpuset. By default "
3733 "this is off (0) in the top cpuset, and inherited from the parent cpuset in "
3734 "newly created cpusets. See the B<Memory Spread> section, below."
3737 #: build/C/man7/cpuset.7:324
3739 msgid "I<sched_load_balance> (since Linux 2.6.24)"
3740 msgstr "I<sched_load_balance> (since Linux 2.6.24)"
3742 #. ================== sched_relax_domain_level ==================
3744 #: build/C/man7/cpuset.7:338
3746 "Flag (0 or 1). If set (1, the default) the kernel will automatically load "
3747 "balance processes in that cpuset over the allowed CPUs in that cpuset. If "
3748 "cleared (0) the kernel will avoid load balancing processes in this cpuset, "
3749 "I<unless> some other cpuset with overlapping CPUs has its "
3750 "I<sched_load_balance> flag set. See B<Scheduler Load Balancing>, below, for "
3753 "Flag (0 or 1). If set (1, the default) the kernel will automatically load "
3754 "balance processes in that cpuset over the allowed CPUs in that cpuset. If "
3755 "cleared (0) the kernel will avoid load balancing processes in this cpuset, "
3756 "I<unless> some other cpuset with overlapping CPUs has its "
3757 "I<sched_load_balance> flag set. See B<Scheduler Load Balancing>, below, for "
3761 #: build/C/man7/cpuset.7:338
3763 msgid "I<sched_relax_domain_level> (since Linux 2.6.26)"
3764 msgstr "I<sched_relax_domain_level> (since Linux 2.6.26)"
3766 #. ================== proc cpuset ==================
3768 #: build/C/man7/cpuset.7:358
3770 "Integer, between -1 and a small positive value. The "
3771 "I<sched_relax_domain_level> controls the width of the range of CPUs over "
3772 "which the kernel scheduler performs immediate rebalancing of runnable tasks "
3773 "across CPUs. If I<sched_load_balance> is disabled, then the setting of "
3774 "I<sched_relax_domain_level> does not matter, as no such load balancing is "
3775 "done. If I<sched_load_balance> is enabled, then the higher the value of the "
3776 "I<sched_relax_domain_level>, the wider the range of CPUs over which "
3777 "immediate load balancing is attempted. See B<Scheduler Relax Domain Level>, "
3778 "below, for further details."
3780 "Integer, between -1 and a small positive value. The "
3781 "I<sched_relax_domain_level> controls the width of the range of CPUs over "
3782 "which the kernel scheduler performs immediate rebalancing of runnable tasks "
3783 "across CPUs. If I<sched_load_balance> is disabled, then the setting of "
3784 "I<sched_relax_domain_level> does not matter, as no such load balancing is "
3785 "done. If I<sched_load_balance> is enabled, then the higher the value of the "
3786 "I<sched_relax_domain_level>, the wider the range of CPUs over which "
3787 "immediate load balancing is attempted. See B<Scheduler Relax Domain Level>, "
3788 "below, for further details."
3790 #. ================== proc status ==================
3792 #: build/C/man7/cpuset.7:366
3794 "In addition to the above pseudo-files in each directory below I</dev/"
3795 "cpuset>, each process has a pseudo-file, I</proc/E<lt>pidE<gt>/cpuset>, that "
3796 "displays the path of the process's cpuset directory relative to the root of "
3797 "the cpuset file system."
3799 "In addition to the above pseudo-files in each directory below I</dev/"
3800 "cpuset>, each process has a pseudo-file, I</proc/E<lt>pidE<gt>/cpuset>, that "
3801 "displays the path of the process's cpuset directory relative to the root of "
3802 "the cpuset file system."
3805 #: build/C/man7/cpuset.7:377
3807 "Also the I</proc/E<lt>pidE<gt>/status> file for each process has four added "
3808 "lines, displaying the process's I<Cpus_allowed> (on which CPUs it may be "
3809 "scheduled) and I<Mems_allowed> (on which memory nodes it may obtain memory), "
3810 "in the two formats B<Mask Format> and B<List Format> (see below) as shown "
3811 "in the following example:"
3813 "Also the I</proc/E<lt>pidE<gt>/status> file for each process has four added "
3814 "lines, displaying the process's I<Cpus_allowed> (on which CPUs it may be "
3815 "scheduled) and I<Mems_allowed> (on which memory nodes it may obtain memory), "
3816 "in the two formats B<Mask Format> and B<List Format> (see below) as shown "
3817 "in the following example:"
3820 #: build/C/man7/cpuset.7:384
3823 "Cpus_allowed: ffffffff,ffffffff,ffffffff,ffffffff\n"
3824 "Cpus_allowed_list: 0-127\n"
3825 "Mems_allowed: ffffffff,ffffffff\n"
3826 "Mems_allowed_list: 0-63\n"
3828 "Cpus_allowed: ffffffff,ffffffff,ffffffff,ffffffff\n"
3829 "Cpus_allowed_list: 0-127\n"
3830 "Mems_allowed: ffffffff,ffffffff\n"
3831 "Mems_allowed_list: 0-63\n"
3833 #. ================== EXTENDED CAPABILITIES ==================
3835 #: build/C/man7/cpuset.7:390
3837 "The \"allowed\" fields were added in Linux 2.6.24; the \"allowed_list\" "
3838 "fields were added in Linux 2.6.26."
3840 "The \"allowed\" fields were added in Linux 2.6.24; the \"allowed_list\" "
3841 "fields were added in Linux 2.6.26."
3844 #: build/C/man7/cpuset.7:390
3846 msgid "EXTENDED CAPABILITIES"
3847 msgstr "EXTENDED CAPABILITIES"
3849 #. ================== Exclusive Cpusets ==================
3851 #: build/C/man7/cpuset.7:398
3853 "In addition to controlling which I<cpus> and I<mems> a process is allowed to "
3854 "use, cpusets provide the following extended capabilities."
3856 "In addition to controlling which I<cpus> and I<mems> a process is allowed to "
3857 "use, cpusets provide the following extended capabilities."
3860 #: build/C/man7/cpuset.7:398
3862 msgid "Exclusive Cpusets"
3863 msgstr "Exclusive Cpusets"
3866 #: build/C/man7/cpuset.7:405
3868 "If a cpuset is marked I<cpu_exclusive> or I<mem_exclusive>, no other cpuset, "
3869 "other than a direct ancestor or descendant, may share any of the same CPUs "
3872 "If a cpuset is marked I<cpu_exclusive> or I<mem_exclusive>, no other cpuset, "
3873 "other than a direct ancestor or descendant, may share any of the same CPUs "
3876 #. ================== Hardwall ==================
3878 #: build/C/man7/cpuset.7:431
3880 "A cpuset that is I<mem_exclusive> restricts kernel allocations for buffer "
3881 "cache pages and other internal kernel data pages commonly shared by the "
3882 "kernel across multiple users. All cpusets, whether I<mem_exclusive> or not, "
3883 "restrict allocations of memory for user space. This enables configuring a "
3884 "system so that several independent jobs can share common kernel data, while "
3885 "isolating each job's user allocation in its own cpuset. To do this, "
3886 "construct a large I<mem_exclusive> cpuset to hold all the jobs, and "
3887 "construct child, non-I<mem_exclusive> cpusets for each individual job. Only "
3888 "a small amount of kernel memory, such as requests from interrupt handlers, "
3889 "is allowed to be placed on memory nodes outside even a I<mem_exclusive> "
3892 "A cpuset that is I<mem_exclusive> restricts kernel allocations for buffer "
3893 "cache pages and other internal kernel data pages commonly shared by the "
3894 "kernel across multiple users. All cpusets, whether I<mem_exclusive> or not, "
3895 "restrict allocations of memory for user space. This enables configuring a "
3896 "system so that several independent jobs can share common kernel data, while "
3897 "isolating each job's user allocation in its own cpuset. To do this, "
3898 "construct a large I<mem_exclusive> cpuset to hold all the jobs, and "
3899 "construct child, non-I<mem_exclusive> cpusets for each individual job. Only "
3900 "a small amount of kernel memory, such as requests from interrupt handlers, "
3901 "is allowed to be placed on memory nodes outside even a I<mem_exclusive> "
3905 #: build/C/man7/cpuset.7:431
3911 #: build/C/man7/cpuset.7:446
3913 "A cpuset that has I<mem_exclusive> or I<mem_hardwall> set is a I<hardwall> "
3914 "cpuset. A I<hardwall> cpuset restricts kernel allocations for page, buffer, "
3915 "and other data commonly shared by the kernel across multiple users. All "
3916 "cpusets, whether I<hardwall> or not, restrict allocations of memory for user "
3919 "A cpuset that has I<mem_exclusive> or I<mem_hardwall> set is a I<hardwall> "
3920 "cpuset. A I<hardwall> cpuset restricts kernel allocations for page, buffer, "
3921 "and other data commonly shared by the kernel across multiple users. All "
3922 "cpusets, whether I<hardwall> or not, restrict allocations of memory for user "
3926 #: build/C/man7/cpuset.7:457
3928 "This enables configuring a system so that several independent jobs can share "
3929 "common kernel data, such as file system pages, while isolating each job's "
3930 "user allocation in its own cpuset. To do this, construct a large "
3931 "I<hardwall> cpuset to hold all the jobs, and construct child cpusets for "
3932 "each individual job which are not I<hardwall> cpusets."
3934 "This enables configuring a system so that several independent jobs can share "
3935 "common kernel data, such as file system pages, while isolating each job's "
3936 "user allocation in its own cpuset. To do this, construct a large "
3937 "I<hardwall> cpuset to hold all the jobs, and construct child cpusets for "
3938 "each individual job which are not I<hardwall> cpusets."
3940 #. ================== Notify On Release ==================
3942 #: build/C/man7/cpuset.7:463
3944 "Only a small amount of kernel memory, such as requests from interrupt "
3945 "handlers, is allowed to be taken outside even a I<hardwall> cpuset."
3947 "Only a small amount of kernel memory, such as requests from interrupt "
3948 "handlers, is allowed to be taken outside even a I<hardwall> cpuset."
3951 #: build/C/man7/cpuset.7:463
3953 msgid "Notify On Release"
3954 msgstr "Notify On Release"
3957 #: build/C/man7/cpuset.7:475
3959 "If the I<notify_on_release> flag is enabled (1) in a cpuset, then whenever "
3960 "the last process in the cpuset leaves (exits or attaches to some other "
3961 "cpuset) and the last child cpuset of that cpuset is removed, the kernel "
3962 "will run the command I</sbin/cpuset_release_agent>, supplying the pathname "
3963 "(relative to the mount point of the cpuset file system) of the abandoned "
3964 "cpuset. This enables automatic removal of abandoned cpusets."
3966 "If the I<notify_on_release> flag is enabled (1) in a cpuset, then whenever "
3967 "the last process in the cpuset leaves (exits or attaches to some other "
3968 "cpuset) and the last child cpuset of that cpuset is removed, the kernel "
3969 "will run the command I</sbin/cpuset_release_agent>, supplying the pathname "
3970 "(relative to the mount point of the cpuset file system) of the abandoned "
3971 "cpuset. This enables automatic removal of abandoned cpusets."
3974 #: build/C/man7/cpuset.7:483
3976 "The default value of I<notify_on_release> in the root cpuset at system boot "
3977 "is disabled (0). The default value of other cpusets at creation is the "
3978 "current value of their parent's I<notify_on_release> setting."
3980 "The default value of I<notify_on_release> in the root cpuset at system boot "
3981 "is disabled (0). The default value of other cpusets at creation is the "
3982 "current value of their parent's I<notify_on_release> setting."
3985 #: build/C/man7/cpuset.7:491
3987 "The command I</sbin/cpuset_release_agent> is invoked, with the name (I</dev/"
3988 "cpuset> relative path) of the to-be-released cpuset in I<argv[1]>."
3990 "The command I</sbin/cpuset_release_agent> is invoked, with the name (I</dev/"
3991 "cpuset> relative path) of the to-be-released cpuset in I<argv[1]>."
3994 #: build/C/man7/cpuset.7:495
3996 "The usual contents of the command I</sbin/cpuset_release_agent> is simply "
3999 "The usual contents of the command I</sbin/cpuset_release_agent> is simply "
4003 #: build/C/man7/cpuset.7:500
4007 "rmdir /dev/cpuset/$1\n"
4010 "rmdir /dev/cpuset/$1\n"
4012 #. ================== Memory Pressure ==================
4014 #: build/C/man7/cpuset.7:508
4016 "As with other flag values below, this flag can be changed by writing an "
4017 "ASCII number 0 or 1 (with optional trailing newline) into the file, to "
4018 "clear or set the flag, respectively."
4020 "As with other flag values below, this flag can be changed by writing an "
4021 "ASCII number 0 or 1 (with optional trailing newline) into the file, to "
4022 "clear or set the flag, respectively."
4025 #: build/C/man7/cpuset.7:508
4027 msgid "Memory Pressure"
4028 msgstr "Memory Pressure"
4031 #: build/C/man7/cpuset.7:514
4033 "The I<memory_pressure> of a cpuset provides a simple per-cpuset running "
4034 "average of the rate that the processes in a cpuset are attempting to free up "
4035 "in-use memory on the nodes of the cpuset to satisfy additional memory "
4038 "The I<memory_pressure> of a cpuset provides a simple per-cpuset running "
4039 "average of the rate that the processes in a cpuset are attempting to free up "
4040 "in-use memory on the nodes of the cpuset to satisfy additional memory "
4044 #: build/C/man7/cpuset.7:518
4046 "This enables batch managers that are monitoring jobs running in dedicated "
4047 "cpusets to efficiently detect what level of memory pressure that job is "
4050 "This enables batch managers that are monitoring jobs running in dedicated "
4051 "cpusets to efficiently detect what level of memory pressure that job is "
4055 #: build/C/man7/cpuset.7:525
4057 "This is useful both on tightly managed systems running a wide mix of "
4058 "submitted jobs, which may choose to terminate or reprioritize jobs that are "
4059 "trying to use more memory than allowed on the nodes assigned them, and with "
4060 "tightly coupled, long-running, massively parallel scientific computing jobs "
4061 "that will dramatically fail to meet required performance goals if they start "
4062 "to use more memory than allowed to them."
4064 "This is useful both on tightly managed systems running a wide mix of "
4065 "submitted jobs, which may choose to terminate or reprioritize jobs that are "
4066 "trying to use more memory than allowed on the nodes assigned them, and with "
4067 "tightly coupled, long-running, massively parallel scientific computing jobs "
4068 "that will dramatically fail to meet required performance goals if they start "
4069 "to use more memory than allowed to them."
4072 #: build/C/man7/cpuset.7:530
4074 "This mechanism provides a very economical way for the batch manager to "
4075 "monitor a cpuset for signs of memory pressure. It's up to the batch manager "
4076 "or other user code to decide what action to take if it detects signs of "
4079 "This mechanism provides a very economical way for the batch manager to "
4080 "monitor a cpuset for signs of memory pressure. It's up to the batch manager "
4081 "or other user code to decide what action to take if it detects signs of "
4085 #: build/C/man7/cpuset.7:537
4087 "Unless memory pressure calculation is enabled by setting the pseudo-file I</"
4088 "dev/cpuset/memory_pressure_enabled>, it is not computed for any cpuset, and "
4089 "reads from any I<memory_pressure> always return zero, as represented by the "
4090 "ASCII string \"0\\en\". See the B<WARNINGS> section, below."
4092 "Unless memory pressure calculation is enabled by setting the pseudo-file I</"
4093 "dev/cpuset/memory_pressure_enabled>, it is not computed for any cpuset, and "
4094 "reads from any I<memory_pressure> always return zero, as represented by the "
4095 "ASCII string \"0\\en\". See the B<WARNINGS> section, below."
4098 #: build/C/man7/cpuset.7:539
4099 msgid "A per-cpuset, running average is employed for the following reasons:"
4100 msgstr "A per-cpuset, running average is employed for the following reasons:"
4103 #: build/C/man7/cpuset.7:544
4105 "Because this meter is per-cpuset rather than per-process or per virtual "
4106 "memory region, the system load imposed by a batch scheduler monitoring this "
4107 "metric is sharply reduced on large systems, because a scan of the tasklist "
4108 "can be avoided on each set of queries."
4110 "Because this meter is per-cpuset rather than per-process or per virtual "
4111 "memory region, the system load imposed by a batch scheduler monitoring this "
4112 "metric is sharply reduced on large systems, because a scan of the tasklist "
4113 "can be avoided on each set of queries."
4116 #: build/C/man7/cpuset.7:549
4118 "Because this meter is a running average rather than an accumulating counter, "
4119 "a batch scheduler can detect memory pressure with a single read, instead of "
4120 "having to read and accumulate results for a period of time."
4122 "Because this meter is a running average rather than an accumulating counter, "
4123 "a batch scheduler can detect memory pressure with a single read, instead of "
4124 "having to read and accumulate results for a period of time."
4127 #: build/C/man7/cpuset.7:555
4129 "Because this meter is per-cpuset rather than per-process, the batch "
4130 "scheduler can obtain the key information\\(emmemory pressure in a cpuset"
4131 "\\(emwith a single read, rather than having to query and accumulate results "
4132 "over all the (dynamically changing) set of processes in the cpuset."
4134 "Because this meter is per-cpuset rather than per-process, the batch "
4135 "scheduler can obtain the key information\\(emmemory pressure in a cpuset"
4136 "\\(emwith a single read, rather than having to query and accumulate results "
4137 "over all the (dynamically changing) set of processes in the cpuset."
4140 #: build/C/man7/cpuset.7:563
4142 "The I<memory_pressure> of a cpuset is calculated using a per-cpuset simple "
4143 "digital filter that is kept within the kernel. For each cpuset, this filter "
4144 "tracks the recent rate at which processes attached to that cpuset enter the "
4145 "kernel direct reclaim code."
4147 "The I<memory_pressure> of a cpuset is calculated using a per-cpuset simple "
4148 "digital filter that is kept within the kernel. For each cpuset, this filter "
4149 "tracks the recent rate at which processes attached to that cpuset enter the "
4150 "kernel direct reclaim code."
4153 #: build/C/man7/cpuset.7:572
4155 "The kernel direct reclaim code is entered whenever a process has to satisfy "
4156 "a memory page request by first finding some other page to repurpose, due to "
4157 "lack of any readily available already free pages. Dirty file system pages "
4158 "are repurposed by first writing them to disk. Unmodified file system buffer "
4159 "pages are repurposed by simply dropping them, though if that page is needed "
4160 "again, it will have to be reread from disk."
4162 "The kernel direct reclaim code is entered whenever a process has to satisfy "
4163 "a memory page request by first finding some other page to repurpose, due to "
4164 "lack of any readily available already free pages. Dirty file system pages "
4165 "are repurposed by first writing them to disk. Unmodified file system buffer "
4166 "pages are repurposed by simply dropping them, though if that page is needed "
4167 "again, it will have to be reread from disk."
4169 #. ================== Memory Spread ==================
4171 #: build/C/man7/cpuset.7:580
4173 "The I<memory_pressure> file provides an integer number representing the "
4174 "recent (half-life of 10 seconds) rate of entries to the direct reclaim code "
4175 "caused by any process in the cpuset, in units of reclaims attempted per "
4176 "second, times 1000."
4178 "The I<memory_pressure> file provides an integer number representing the "
4179 "recent (half-life of 10 seconds) rate of entries to the direct reclaim code "
4180 "caused by any process in the cpuset, in units of reclaims attempted per "
4181 "second, times 1000."
4184 #: build/C/man7/cpuset.7:580
4186 msgid "Memory Spread"
4187 msgstr "Memory Spread"
4190 #: build/C/man7/cpuset.7:588
4192 "There are two Boolean flag files per cpuset that control where the kernel "
4193 "allocates pages for the file-system buffers and related in-kernel data "
4194 "structures. They are called I<memory_spread_page> and I<memory_spread_slab>."
4196 "There are two Boolean flag files per cpuset that control where the kernel "
4197 "allocates pages for the file-system buffers and related in-kernel data "
4198 "structures. They are called I<memory_spread_page> and I<memory_spread_slab>."
4201 #: build/C/man7/cpuset.7:595
4203 "If the per-cpuset Boolean flag file I<memory_spread_page> is set, then the "
4204 "kernel will spread the file-system buffers (page cache) evenly over all the "
4205 "nodes that the faulting process is allowed to use, instead of preferring to "
4206 "put those pages on the node where the process is running."
4208 "If the per-cpuset Boolean flag file I<memory_spread_page> is set, then the "
4209 "kernel will spread the file-system buffers (page cache) evenly over all the "
4210 "nodes that the faulting process is allowed to use, instead of preferring to "
4211 "put those pages on the node where the process is running."
4214 #: build/C/man7/cpuset.7:603
4216 "If the per-cpuset Boolean flag file I<memory_spread_slab> is set, then the "
4217 "kernel will spread some file-system-related slab caches, such as those for "
4218 "inodes and directory entries, evenly over all the nodes that the faulting "
4219 "process is allowed to use, instead of preferring to put those pages on the "
4220 "node where the process is running."
4222 "If the per-cpuset Boolean flag file I<memory_spread_slab> is set, then the "
4223 "kernel will spread some file-system-related slab caches, such as those for "
4224 "inodes and directory entries, evenly over all the nodes that the faulting "
4225 "process is allowed to use, instead of preferring to put those pages on the "
4226 "node where the process is running."
4229 #: build/C/man7/cpuset.7:608
4231 "The setting of these flags does not affect the data segment (see B<brk>(2)) "
4232 "or stack segment pages of a process."
4234 "The setting of these flags does not affect the data segment (see B<brk>(2)) "
4235 "or stack segment pages of a process."
4238 #: build/C/man7/cpuset.7:616
4240 "By default, both kinds of memory spreading are off and the kernel prefers to "
4241 "allocate memory pages on the node local to where the requesting process is "
4242 "running. If that node is not allowed by the process's NUMA memory policy or "
4243 "cpuset configuration or if there are insufficient free memory pages on that "
4244 "node, then the kernel looks for the nearest node that is allowed and has "
4245 "sufficient free memory."
4247 "By default, both kinds of memory spreading are off and the kernel prefers to "
4248 "allocate memory pages on the node local to where the requesting process is "
4249 "running. If that node is not allowed by the process's NUMA memory policy or "
4250 "cpuset configuration or if there are insufficient free memory pages on that "
4251 "node, then the kernel looks for the nearest node that is allowed and has "
4252 "sufficient free memory."
4255 #: build/C/man7/cpuset.7:619
4257 "When new cpusets are created, they inherit the memory spread settings of "
4260 "When new cpusets are created, they inherit the memory spread settings of "
4264 #: build/C/man7/cpuset.7:634
4266 "Setting memory spreading causes allocations for the affected page or slab "
4267 "caches to ignore the process's NUMA memory policy and be spread instead. "
4268 "However, the effect of these changes in memory placement caused by cpuset-"
4269 "specified memory spreading is hidden from the B<mbind>(2) or "
4270 "B<set_mempolicy>(2) calls. These two NUMA memory policy calls always "
4271 "appear to behave as if no cpuset-specified memory spreading is in effect, "
4272 "even if it is. If cpuset memory spreading is subsequently turned off, the "
4273 "NUMA memory policy most recently specified by these calls is automatically "
4276 "Setting memory spreading causes allocations for the affected page or slab "
4277 "caches to ignore the process's NUMA memory policy and be spread instead. "
4278 "However, the effect of these changes in memory placement caused by cpuset-"
4279 "specified memory spreading is hidden from the B<mbind>(2) or "
4280 "B<set_mempolicy>(2) calls. These two NUMA memory policy calls always "
4281 "appear to behave as if no cpuset-specified memory spreading is in effect, "
4282 "even if it is. If cpuset memory spreading is subsequently turned off, the "
4283 "NUMA memory policy most recently specified by these calls is automatically "
4287 #: build/C/man7/cpuset.7:643
4289 "Both I<memory_spread_page> and I<memory_spread_slab> are Boolean flag "
4290 "files. By default they contain \"0\", meaning that the feature is off for "
4291 "that cpuset. If a \"1\" is written to that file, that turns the named "
4294 "Both I<memory_spread_page> and I<memory_spread_slab> are Boolean flag "
4295 "files. By default they contain \"0\", meaning that the feature is off for "
4296 "that cpuset. If a \"1\" is written to that file, that turns the named "
4300 #: build/C/man7/cpuset.7:646
4302 "Cpuset-specified memory spreading behaves similarly to what is known (in "
4303 "other contexts) as round-robin or interleave memory placement."
4305 "Cpuset-specified memory spreading behaves similarly to what is known (in "
4306 "other contexts) as round-robin or interleave memory placement."
4309 #: build/C/man7/cpuset.7:649
4311 "Cpuset-specified memory spreading can provide substantial performance "
4312 "improvements for jobs that:"
4314 "Cpuset-specified memory spreading can provide substantial performance "
4315 "improvements for jobs that:"
4318 #: build/C/man7/cpuset.7:649
4324 #: build/C/man7/cpuset.7:653
4326 "need to place thread-local data on memory nodes close to the CPUs which are "
4327 "running the threads that most frequently access that data; but also"
4329 "need to place thread-local data on memory nodes close to the CPUs which are "
4330 "running the threads that most frequently access that data; but also"
4333 #: build/C/man7/cpuset.7:653
4339 #: build/C/man7/cpuset.7:656
4341 "need to access large file-system data sets that must to be spread across the "
4342 "several nodes in the job's cpuset in order to fit."
4344 "need to access large file-system data sets that must to be spread across the "
4345 "several nodes in the job's cpuset in order to fit."
4347 #. ================== Memory Migration ==================
4349 #: build/C/man7/cpuset.7:663
4351 "Without this policy, the memory allocation across the nodes in the job's "
4352 "cpuset can become very uneven, especially for jobs that might have just a "
4353 "single thread initializing or reading in the data set."
4355 "Without this policy, the memory allocation across the nodes in the job's "
4356 "cpuset can become very uneven, especially for jobs that might have just a "
4357 "single thread initializing or reading in the data set."
4360 #: build/C/man7/cpuset.7:663
4362 msgid "Memory Migration"
4363 msgstr "Memory Migration"
4366 #: build/C/man7/cpuset.7:672
4368 "Normally, under the default setting (disabled) of I<memory_migrate>, once a "
4369 "page is allocated (given a physical page of main memory) then that page "
4370 "stays on whatever node it was allocated, so long as it remains allocated, "
4371 "even if the cpuset's memory-placement policy I<mems> subsequently changes."
4373 "Normally, under the default setting (disabled) of I<memory_migrate>, once a "
4374 "page is allocated (given a physical page of main memory) then that page "
4375 "stays on whatever node it was allocated, so long as it remains allocated, "
4376 "even if the cpuset's memory-placement policy I<mems> subsequently changes."
4379 #: build/C/man7/cpuset.7:678
4381 "When memory migration is enabled in a cpuset, if the I<mems> setting of the "
4382 "cpuset is changed, then any memory page in use by any process in the cpuset "
4383 "that is on a memory node that is no longer allowed will be migrated to a "
4384 "memory node that is allowed."
4386 "When memory migration is enabled in a cpuset, if the I<mems> setting of the "
4387 "cpuset is changed, then any memory page in use by any process in the cpuset "
4388 "that is on a memory node that is no longer allowed will be migrated to a "
4389 "memory node that is allowed."
4392 #: build/C/man7/cpuset.7:684
4394 "Furthermore, if a process is moved into a cpuset with I<memory_migrate> "
4395 "enabled, any memory pages it uses that were on memory nodes allowed in its "
4396 "previous cpuset, but which are not allowed in its new cpuset, will be "
4397 "migrated to a memory node allowed in the new cpuset."
4399 "Furthermore, if a process is moved into a cpuset with I<memory_migrate> "
4400 "enabled, any memory pages it uses that were on memory nodes allowed in its "
4401 "previous cpuset, but which are not allowed in its new cpuset, will be "
4402 "migrated to a memory node allowed in the new cpuset."
4404 #. ================== Scheduler Load Balancing ==================
4406 #: build/C/man7/cpuset.7:692
4408 "The relative placement of a migrated page within the cpuset is preserved "
4409 "during these migration operations if possible. For example, if the page was "
4410 "on the second valid node of the prior cpuset, then the page will be placed "
4411 "on the second valid node of the new cpuset, if possible."
4413 "The relative placement of a migrated page within the cpuset is preserved "
4414 "during these migration operations if possible. For example, if the page was "
4415 "on the second valid node of the prior cpuset, then the page will be placed "
4416 "on the second valid node of the new cpuset, if possible."
4419 #: build/C/man7/cpuset.7:692
4421 msgid "Scheduler Load Balancing"
4422 msgstr "Scheduler Load Balancing"
4425 #: build/C/man7/cpuset.7:699
4427 "The kernel scheduler automatically load balances processes. If one CPU is "
4428 "underutilized, the kernel will look for processes on other more overloaded "
4429 "CPUs and move those processes to the underutilized CPU, within the "
4430 "constraints of such placement mechanisms as cpusets and B<sched_setaffinity>"
4433 "The kernel scheduler automatically load balances processes. If one CPU is "
4434 "underutilized, the kernel will look for processes on other more overloaded "
4435 "CPUs and move those processes to the underutilized CPU, within the "
4436 "constraints of such placement mechanisms as cpusets and B<sched_setaffinity>"
4440 #: build/C/man7/cpuset.7:712
4442 "The algorithmic cost of load balancing and its impact on key shared kernel "
4443 "data structures such as the process list increases more than linearly with "
4444 "the number of CPUs being balanced. For example, it costs more to load "
4445 "balance across one large set of CPUs than it does to balance across two "
4446 "smaller sets of CPUs, each of half the size of the larger set. (The precise "
4447 "relationship between the number of CPUs being balanced and the cost of load "
4448 "balancing depends on implementation details of the kernel process scheduler, "
4449 "which is subject to change over time, as improved kernel scheduler "
4450 "algorithms are implemented.)"
4452 "The algorithmic cost of load balancing and its impact on key shared kernel "
4453 "data structures such as the process list increases more than linearly with "
4454 "the number of CPUs being balanced. For example, it costs more to load "
4455 "balance across one large set of CPUs than it does to balance across two "
4456 "smaller sets of CPUs, each of half the size of the larger set. (The precise "
4457 "relationship between the number of CPUs being balanced and the cost of load "
4458 "balancing depends on implementation details of the kernel process scheduler, "
4459 "which is subject to change over time, as improved kernel scheduler "
4460 "algorithms are implemented.)"
4463 #: build/C/man7/cpuset.7:718
4465 "The per-cpuset flag I<sched_load_balance> provides a mechanism to suppress "
4466 "this automatic scheduler load balancing in cases where it is not needed and "
4467 "suppressing it would have worthwhile performance benefits."
4469 "The per-cpuset flag I<sched_load_balance> provides a mechanism to suppress "
4470 "this automatic scheduler load balancing in cases where it is not needed and "
4471 "suppressing it would have worthwhile performance benefits."
4474 #: build/C/man7/cpuset.7:722
4476 "By default, load balancing is done across all CPUs, except those marked "
4477 "isolated using the kernel boot time \"isolcpus=\" argument. (See "
4478 "B<Scheduler Relax Domain Level>, below, to change this default.)"
4480 "By default, load balancing is done across all CPUs, except those marked "
4481 "isolated using the kernel boot time \"isolcpus=\" argument. (See "
4482 "B<Scheduler Relax Domain Level>, below, to change this default.)"
4485 #: build/C/man7/cpuset.7:725
4487 "This default load balancing across all CPUs is not well suited to the "
4488 "following two situations:"
4490 "This default load balancing across all CPUs is not well suited to the "
4491 "following two situations:"
4494 #: build/C/man7/cpuset.7:729
4496 "On large systems, load balancing across many CPUs is expensive. If the "
4497 "system is managed using cpusets to place independent jobs on separate sets "
4498 "of CPUs, full load balancing is unnecessary."
4500 "On large systems, load balancing across many CPUs is expensive. If the "
4501 "system is managed using cpusets to place independent jobs on separate sets "
4502 "of CPUs, full load balancing is unnecessary."
4505 #: build/C/man7/cpuset.7:733
4507 "Systems supporting real-time on some CPUs need to minimize system overhead "
4508 "on those CPUs, including avoiding process load balancing if that is not "
4511 "Systems supporting real-time on some CPUs need to minimize system overhead "
4512 "on those CPUs, including avoiding process load balancing if that is not "
4516 #: build/C/man7/cpuset.7:743
4518 "When the per-cpuset flag I<sched_load_balance> is enabled (the default "
4519 "setting), it requests load balancing across all the CPUs in that cpuset's "
4520 "allowed CPUs, ensuring that load balancing can move a process (not otherwise "
4521 "pinned, as by B<sched_setaffinity>(2)) from any CPU in that cpuset to any "
4524 "When the per-cpuset flag I<sched_load_balance> is enabled (the default "
4525 "setting), it requests load balancing across all the CPUs in that cpuset's "
4526 "allowed CPUs, ensuring that load balancing can move a process (not otherwise "
4527 "pinned, as by B<sched_setaffinity>(2)) from any CPU in that cpuset to any "
4531 #: build/C/man7/cpuset.7:752
4533 "When the per-cpuset flag I<sched_load_balance> is disabled, then the "
4534 "scheduler will avoid load balancing across the CPUs in that cpuset, "
4535 "I<except> in so far as is necessary because some overlapping cpuset has "
4536 "I<sched_load_balance> enabled."
4538 "When the per-cpuset flag I<sched_load_balance> is disabled, then the "
4539 "scheduler will avoid load balancing across the CPUs in that cpuset, "
4540 "I<except> in so far as is necessary because some overlapping cpuset has "
4541 "I<sched_load_balance> enabled."
4544 #: build/C/man7/cpuset.7:760
4546 "So, for example, if the top cpuset has the flag I<sched_load_balance> "
4547 "enabled, then the scheduler will load balance across all CPUs, and the "
4548 "setting of the I<sched_load_balance> flag in other cpusets has no effect, as "
4549 "we're already fully load balancing."
4551 "So, for example, if the top cpuset has the flag I<sched_load_balance> "
4552 "enabled, then the scheduler will load balance across all CPUs, and the "
4553 "setting of the I<sched_load_balance> flag in other cpusets has no effect, as "
4554 "we're already fully load balancing."
4557 #: build/C/man7/cpuset.7:765
4559 "Therefore in the above two situations, the flag I<sched_load_balance> should "
4560 "be disabled in the top cpuset, and only some of the smaller, child cpusets "
4561 "would have this flag enabled."
4563 "Therefore in the above two situations, the flag I<sched_load_balance> should "
4564 "be disabled in the top cpuset, and only some of the smaller, child cpusets "
4565 "would have this flag enabled."
4568 #: build/C/man7/cpuset.7:773
4570 "When doing this, you don't usually want to leave any unpinned processes in "
4571 "the top cpuset that might use nontrivial amounts of CPU, as such processes "
4572 "may be artificially constrained to some subset of CPUs, depending on the "
4573 "particulars of this flag setting in descendant cpusets. Even if such a "
4574 "process could use spare CPU cycles in some other CPUs, the kernel scheduler "
4575 "might not consider the possibility of load balancing that process to the "
4578 "When doing this, you don't usually want to leave any unpinned processes in "
4579 "the top cpuset that might use nontrivial amounts of CPU, as such processes "
4580 "may be artificially constrained to some subset of CPUs, depending on the "
4581 "particulars of this flag setting in descendant cpusets. Even if such a "
4582 "process could use spare CPU cycles in some other CPUs, the kernel scheduler "
4583 "might not consider the possibility of load balancing that process to the "
4586 #. ================== Scheduler Relax Domain Level ==================
4588 #: build/C/man7/cpuset.7:779
4590 "Of course, processes pinned to a particular CPU can be left in a cpuset that "
4591 "disables I<sched_load_balance> as those processes aren't going anywhere else "
4594 "Of course, processes pinned to a particular CPU can be left in a cpuset that "
4595 "disables I<sched_load_balance> as those processes aren't going anywhere else "
4599 #: build/C/man7/cpuset.7:779
4601 msgid "Scheduler Relax Domain Level"
4602 msgstr "Scheduler Relax Domain Level"
4605 #: build/C/man7/cpuset.7:800
4607 "The kernel scheduler performs immediate load balancing whenever a CPU "
4608 "becomes free or another task becomes runnable. This load balancing works to "
4609 "ensure that as many CPUs as possible are usefully employed running tasks. "
4610 "The kernel also performs periodic load balancing off the software clock "
4611 "described in I<time>(7). The setting of I<sched_relax_domain_level> only "
4612 "applies to immediate load balancing. Regardless of the "
4613 "I<sched_relax_domain_level> setting, periodic load balancing is attempted "
4614 "over all CPUs (unless disabled by turning off I<sched_load_balance>.) In "
4615 "any case, of course, tasks will only be scheduled to run on CPUs allowed by "
4616 "their cpuset, as modified by B<sched_setaffinity>(2) system calls."
4618 "The kernel scheduler performs immediate load balancing whenever a CPU "
4619 "becomes free or another task becomes runnable. This load balancing works to "
4620 "ensure that as many CPUs as possible are usefully employed running tasks. "
4621 "The kernel also performs periodic load balancing off the software clock "
4622 "described in I<time>(7). The setting of I<sched_relax_domain_level> only "
4623 "applies to immediate load balancing. Regardless of the "
4624 "I<sched_relax_domain_level> setting, periodic load balancing is attempted "
4625 "over all CPUs (unless disabled by turning off I<sched_load_balance>.) In "
4626 "any case, of course, tasks will only be scheduled to run on CPUs allowed by "
4627 "their cpuset, as modified by B<sched_setaffinity>(2) system calls."
4630 #: build/C/man7/cpuset.7:808
4632 "On small systems, such as those with just a few CPUs, immediate load "
4633 "balancing is useful to improve system interactivity and to minimize wasteful "
4634 "idle CPU cycles. But on large systems, attempting immediate load balancing "
4635 "across a large number of CPUs can be more costly than it is worth, depending "
4636 "on the particular performance characteristics of the job mix and the "
4639 "On small systems, such as those with just a few CPUs, immediate load "
4640 "balancing is useful to improve system interactivity and to minimize wasteful "
4641 "idle CPU cycles. But on large systems, attempting immediate load balancing "
4642 "across a large number of CPUs can be more costly than it is worth, depending "
4643 "on the particular performance characteristics of the job mix and the "
4647 #: build/C/man7/cpuset.7:816
4649 "The exact meaning of the small integer values of I<sched_relax_domain_level> "
4650 "will depend on internal implementation details of the kernel scheduler code "
4651 "and on the non-uniform architecture of the hardware. Both of these will "
4652 "evolve over time and vary by system architecture and kernel version."
4654 "The exact meaning of the small integer values of I<sched_relax_domain_level> "
4655 "will depend on internal implementation details of the kernel scheduler code "
4656 "and on the non-uniform architecture of the hardware. Both of these will "
4657 "evolve over time and vary by system architecture and kernel version."
4660 #: build/C/man7/cpuset.7:821
4662 "As of this writing, when this capability was introduced in Linux 2.6.26, on "
4663 "certain popular architectures, the positive values of "
4664 "I<sched_relax_domain_level> have the following meanings."
4666 "As of this writing, when this capability was introduced in Linux 2.6.26, on "
4667 "certain popular architectures, the positive values of "
4668 "I<sched_relax_domain_level> have the following meanings."
4671 #: build/C/man7/cpuset.7:823
4677 #: build/C/man7/cpuset.7:826
4679 "Perform immediate load balancing across Hyper-Thread siblings on the same "
4682 "Perform immediate load balancing across Hyper-Thread siblings on the same "
4686 #: build/C/man7/cpuset.7:826
4692 #: build/C/man7/cpuset.7:828
4694 "Perform immediate load balancing across other cores in the same package."
4696 "Perform immediate load balancing across other cores in the same package."
4699 #: build/C/man7/cpuset.7:828
4705 #: build/C/man7/cpuset.7:831
4707 "Perform immediate load balancing across other CPUs on the same node or blade."
4709 "Perform immediate load balancing across other CPUs on the same node or blade."
4712 #: build/C/man7/cpuset.7:831
4718 #: build/C/man7/cpuset.7:834
4720 "Perform immediate load balancing across over several (implementation detail) "
4721 "nodes [On NUMA systems]."
4723 "Perform immediate load balancing across over several (implementation detail) "
4724 "nodes [On NUMA systems]."
4727 #: build/C/man7/cpuset.7:834
4733 #: build/C/man7/cpuset.7:837
4735 "Perform immediate load balancing across over all CPUs in system [On NUMA "
4738 "Perform immediate load balancing across over all CPUs in system [On NUMA "
4742 #: build/C/man7/cpuset.7:846
4744 "The I<sched_relax_domain_level> value of zero (0) always means don't perform "
4745 "immediate load balancing, hence that load balancing is only done "
4746 "periodically, not immediately when a CPU becomes available or another task "
4749 "The I<sched_relax_domain_level> value of zero (0) always means don't perform "
4750 "immediate load balancing, hence that load balancing is only done "
4751 "periodically, not immediately when a CPU becomes available or another task "
4755 #: build/C/man7/cpuset.7:854
4757 "The I<sched_relax_domain_level> value of minus one (-1) always means use "
4758 "the system default value. The system default value can vary by architecture "
4759 "and kernel version. This system default value can be changed by kernel boot-"
4760 "time \"relax_domain_level=\" argument."
4762 "The I<sched_relax_domain_level> value of minus one (-1) always means use "
4763 "the system default value. The system default value can vary by architecture "
4764 "and kernel version. This system default value can be changed by kernel boot-"
4765 "time \"relax_domain_level=\" argument."
4768 #: build/C/man7/cpuset.7:862
4770 "In the case of multiple overlapping cpusets which have conflicting "
4771 "I<sched_relax_domain_level> values, then the highest such value applies to "
4772 "all CPUs in any of the overlapping cpusets. In such cases, the value "
4773 "B<minus one (-1)> is the lowest value, overridden by any other value, and "
4774 "the value B<zero (0)> is the next lowest value."
4776 "In the case of multiple overlapping cpusets which have conflicting "
4777 "I<sched_relax_domain_level> values, then the highest such value applies to "
4778 "all CPUs in any of the overlapping cpusets. In such cases, the value "
4779 "B<minus one (-1)> is the lowest value, overridden by any other value, and "
4780 "the value B<zero (0)> is the next lowest value."
4783 #: build/C/man7/cpuset.7:862
4788 #. ================== Mask Format ==================
4790 #: build/C/man7/cpuset.7:866
4792 "The following formats are used to represent sets of CPUs and memory nodes."
4794 "The following formats are used to represent sets of CPUs and memory nodes."
4797 #: build/C/man7/cpuset.7:866
4800 msgstr "Mask Format"
4803 #: build/C/man7/cpuset.7:871
4805 "The B<Mask Format> is used to represent CPU and memory-node bitmasks in the "
4806 "I</proc/E<lt>pidE<gt>/status> file."
4808 "The B<Mask Format> is used to represent CPU and memory-node bitmasks in the "
4809 "I</proc/E<lt>pidE<gt>/status> file."
4812 #: build/C/man7/cpuset.7:879
4814 "This format displays each 32-bit word in hexadecimal (using ASCII characters "
4815 "\"0\" - \"9\" and \"a\" - \"f\"); words are filled with leading zeros, if "
4816 "required. For masks longer than one word, a comma separator is used between "
4817 "words. Words are displayed in big-endian order, which has the most "
4818 "significant bit first. The hex digits within a word are also in big-endian "
4821 "This format displays each 32-bit word in hexadecimal (using ASCII characters "
4822 "\"0\" - \"9\" and \"a\" - \"f\"); words are filled with leading zeros, if "
4823 "required. For masks longer than one word, a comma separator is used between "
4824 "words. Words are displayed in big-endian order, which has the most "
4825 "significant bit first. The hex digits within a word are also in big-endian "
4829 #: build/C/man7/cpuset.7:882
4831 "The number of 32-bit words displayed is the minimum number needed to display "
4832 "all bits of the bitmask, based on the size of the bitmask."
4834 "The number of 32-bit words displayed is the minimum number needed to display "
4835 "all bits of the bitmask, based on the size of the bitmask."
4838 #: build/C/man7/cpuset.7:884
4839 msgid "Examples of the B<Mask Format>:"
4840 msgstr "Examples of the B<Mask Format>:"
4843 #: build/C/man7/cpuset.7:892
4846 "00000001 # just bit 0 set\n"
4847 "40000000,00000000,00000000 # just bit 94 set\n"
4848 "00000001,00000000,00000000 # just bit 64 set\n"
4849 "000000ff,00000000 # bits 32-39 set\n"
4850 "00000000,000E3862 # 1,5,6,11-13,17-19 set\n"
4852 "00000001 # just bit 0 set\n"
4853 "40000000,00000000,00000000 # just bit 94 set\n"
4854 "00000001,00000000,00000000 # just bit 64 set\n"
4855 "000000ff,00000000 # bits 32-39 set\n"
4856 "00000000,000E3862 # 1,5,6,11-13,17-19 set\n"
4859 #: build/C/man7/cpuset.7:896
4860 msgid "A mask with bits 0, 1, 2, 4, 8, 16, 32, and 64 set displays as:"
4861 msgstr "A mask with bits 0, 1, 2, 4, 8, 16, 32, and 64 set displays as:"
4864 #: build/C/man7/cpuset.7:900
4866 msgid "00000001,00000001,00010117\n"
4867 msgstr "00000001,00000001,00010117\n"
4869 #. ================== List Format ==================
4871 #: build/C/man7/cpuset.7:907
4873 "The first \"1\" is for bit 64, the second for bit 32, the third for bit 16, "
4874 "the fourth for bit 8, the fifth for bit 4, and the \"7\" is for bits 2, 1, "
4877 "The first \"1\" is for bit 64, the second for bit 32, the third for bit 16, "
4878 "the fourth for bit 8, the fifth for bit 4, and the \"7\" is for bits 2, 1, "
4882 #: build/C/man7/cpuset.7:907
4885 msgstr "List Format"
4888 #: build/C/man7/cpuset.7:914
4890 "The B<List Format> for I<cpus> and I<mems> is a comma-separated list of CPU "
4891 "or memory-node numbers and ranges of numbers, in ASCII decimal."
4893 "The B<List Format> for I<cpus> and I<mems> is a comma-separated list of CPU "
4894 "or memory-node numbers and ranges of numbers, in ASCII decimal."
4897 #: build/C/man7/cpuset.7:916
4898 msgid "Examples of the B<List Format>:"
4899 msgstr "Examples of the B<List Format>:"
4902 #: build/C/man7/cpuset.7:921
4905 "0-4,9 # bits 0, 1, 2, 3, 4, and 9 set\n"
4906 "0-2,7,12-14 # bits 0, 1, 2, 7, 12, 13, and 14 set\n"
4908 "0-4,9 # bits 0, 1, 2, 3, 4, and 9 set\n"
4909 "0-2,7,12-14 # bits 0, 1, 2, 7, 12, 13, and 14 set\n"
4911 #. ================== RULES ==================
4913 #: build/C/man7/cpuset.7:924
4919 #: build/C/man7/cpuset.7:926
4920 msgid "The following rules apply to each cpuset:"
4921 msgstr "The following rules apply to each cpuset:"
4924 #: build/C/man7/cpuset.7:929
4926 "Its CPUs and memory nodes must be a (possibly equal) subset of its parent's."
4928 "Its CPUs and memory nodes must be a (possibly equal) subset of its parent's."
4931 #: build/C/man7/cpuset.7:933
4932 msgid "It can only be marked I<cpu_exclusive> if its parent is."
4933 msgstr "It can only be marked I<cpu_exclusive> if its parent is."
4936 #: build/C/man7/cpuset.7:937
4937 msgid "It can only be marked I<mem_exclusive> if its parent is."
4938 msgstr "It can only be marked I<mem_exclusive> if its parent is."
4941 #: build/C/man7/cpuset.7:941
4942 msgid "If it is I<cpu_exclusive>, its CPUs may not overlap any sibling."
4943 msgstr "If it is I<cpu_exclusive>, its CPUs may not overlap any sibling."
4945 #. ================== PERMISSIONS ==================
4947 #: build/C/man7/cpuset.7:946
4949 "If it is I<memory_exclusive>, its memory nodes may not overlap any sibling."
4951 "If it is I<memory_exclusive>, its memory nodes may not overlap any sibling."
4954 #: build/C/man7/cpuset.7:946
4957 msgstr "PERMISSIONS"
4960 #: build/C/man7/cpuset.7:951
4962 "The permissions of a cpuset are determined by the permissions of the "
4963 "directories and pseudo-files in the cpuset file system, normally mounted at "
4966 "The permissions of a cpuset are determined by the permissions of the "
4967 "directories and pseudo-files in the cpuset file system, normally mounted at "
4971 #: build/C/man7/cpuset.7:960
4973 "For instance, a process can put itself in some other cpuset (than its "
4974 "current one) if it can write the I<tasks> file for that cpuset. This "
4975 "requires execute permission on the encompassing directories and write "
4976 "permission on the I<tasks> file."
4978 "For instance, a process can put itself in some other cpuset (than its "
4979 "current one) if it can write the I<tasks> file for that cpuset. This "
4980 "requires execute permission on the encompassing directories and write "
4981 "permission on the I<tasks> file."
4984 #: build/C/man7/cpuset.7:967
4986 "An additional constraint is applied to requests to place some other process "
4987 "in a cpuset. One process may not attach another to a cpuset unless it would "
4988 "have permission to send that process a signal (see B<kill>(2))."
4990 "An additional constraint is applied to requests to place some other process "
4991 "in a cpuset. One process may not attach another to a cpuset unless it would "
4992 "have permission to send that process a signal (see B<kill>(2))."
4995 #: build/C/man7/cpuset.7:978
4997 "A process may create a child cpuset if it can access and write the parent "
4998 "cpuset directory. It can modify the CPUs or memory nodes in a cpuset if it "
4999 "can access that cpuset's directory (execute permissions on the each of the "
5000 "parent directories) and write the corresponding I<cpus> or I<mems> file."
5002 "A process may create a child cpuset if it can access and write the parent "
5003 "cpuset directory. It can modify the CPUs or memory nodes in a cpuset if it "
5004 "can access that cpuset's directory (execute permissions on the each of the "
5005 "parent directories) and write the corresponding I<cpus> or I<mems> file."
5008 #: build/C/man7/cpuset.7:999
5010 "There is one minor difference between the manner in which these permissions "
5011 "are evaluated and the manner in which normal file-system operation "
5012 "permissions are evaluated. The kernel interprets relative pathnames "
5013 "starting at a process's current working directory. Even if one is operating "
5014 "on a cpuset file, relative pathnames are interpreted relative to the "
5015 "process's current working directory, not relative to the process's current "
5016 "cpuset. The only ways that cpuset paths relative to a process's current "
5017 "cpuset can be used are if either the process's current working directory is "
5018 "its cpuset (it first did a B<cd> or B<chdir>(2) to its cpuset directory "
5019 "beneath I</dev/cpuset>, which is a bit unusual) or if some user code "
5020 "converts the relative cpuset path to a full file-system path."
5022 "There is one minor difference between the manner in which these permissions "
5023 "are evaluated and the manner in which normal file-system operation "
5024 "permissions are evaluated. The kernel interprets relative pathnames "
5025 "starting at a process's current working directory. Even if one is operating "
5026 "on a cpuset file, relative pathnames are interpreted relative to the "
5027 "process's current working directory, not relative to the process's current "
5028 "cpuset. The only ways that cpuset paths relative to a process's current "
5029 "cpuset can be used are if either the process's current working directory is "
5030 "its cpuset (it first did a B<cd> or B<chdir>(2) to its cpuset directory "
5031 "beneath I</dev/cpuset>, which is a bit unusual) or if some user code "
5032 "converts the relative cpuset path to a full file-system path."
5034 #. ================== WARNINGS ==================
5036 #: build/C/man7/cpuset.7:1014
5038 "In theory, this means that user code should specify cpusets using absolute "
5039 "pathnames, which requires knowing the mount point of the cpuset file system "
5040 "(usually, but not necessarily, I</dev/cpuset>). In practice, all user level "
5041 "code that this author is aware of simply assumes that if the cpuset file "
5042 "system is mounted, then it is mounted at I</dev/cpuset>. Furthermore, it is "
5043 "common practice for carefully written user code to verify the presence of "
5044 "the pseudo-file I</dev/cpuset/tasks> in order to verify that the cpuset "
5045 "pseudo-file system is currently mounted."
5047 "In theory, this means that user code should specify cpusets using absolute "
5048 "pathnames, which requires knowing the mount point of the cpuset file system "
5049 "(usually, but not necessarily, I</dev/cpuset>). In practice, all user level "
5050 "code that this author is aware of simply assumes that if the cpuset file "
5051 "system is mounted, then it is mounted at I</dev/cpuset>. Furthermore, it is "
5052 "common practice for carefully written user code to verify the presence of "
5053 "the pseudo-file I</dev/cpuset/tasks> in order to verify that the cpuset "
5054 "pseudo-file system is currently mounted."
5057 #: build/C/man7/cpuset.7:1014
5063 #: build/C/man7/cpuset.7:1015
5065 msgid "Enabling memory_pressure"
5066 msgstr "Enabling memory_pressure"
5069 #: build/C/man7/cpuset.7:1024
5071 "By default, the per-cpuset file I<memory_pressure> always contains zero "
5072 "(0). Unless this feature is enabled by writing \"1\" to the pseudo-file I</"
5073 "dev/cpuset/memory_pressure_enabled>, the kernel does not compute per-cpuset "
5074 "I<memory_pressure>."
5076 "By default, the per-cpuset file I<memory_pressure> always contains zero "
5077 "(0). Unless this feature is enabled by writing \"1\" to the pseudo-file I</"
5078 "dev/cpuset/memory_pressure_enabled>, the kernel does not compute per-cpuset "
5079 "I<memory_pressure>."
5082 #: build/C/man7/cpuset.7:1024
5084 msgid "Using the echo command"
5085 msgstr "Using the echo command"
5087 #. Gack! csh(1)'s echo does this
5089 #: build/C/man7/cpuset.7:1035
5091 "When using the B<echo> command at the shell prompt to change the values of "
5092 "cpuset files, beware that the built-in B<echo> command in some shells does "
5093 "not display an error message if the B<write>(2) system call fails. For "
5094 "example, if the command:"
5096 "When using the B<echo> command at the shell prompt to change the values of "
5097 "cpuset files, beware that the built-in B<echo> command in some shells does "
5098 "not display an error message if the B<write>(2) system call fails. For "
5099 "example, if the command:"
5102 #: build/C/man7/cpuset.7:1039
5104 msgid "echo 19 E<gt> mems\n"
5105 msgstr "echo 19 E<gt> mems\n"
5108 #: build/C/man7/cpuset.7:1052
5110 "failed because memory node 19 was not allowed (perhaps the current system "
5111 "does not have a memory node 19), then the B<echo> command might not display "
5112 "any error. It is better to use the B</bin/echo> external command to change "
5113 "cpuset file settings, as this command will display B<write>(2) errors, as "
5116 "failed because memory node 19 was not allowed (perhaps the current system "
5117 "does not have a memory node 19), then the B<echo> command might not display "
5118 "any error. It is better to use the B</bin/echo> external command to change "
5119 "cpuset file settings, as this command will display B<write>(2) errors, as "
5123 #: build/C/man7/cpuset.7:1057
5126 "/bin/echo 19 E<gt> mems\n"
5127 "/bin/echo: write error: Invalid argument\n"
5129 "/bin/echo 19 E<gt> mems\n"
5130 "/bin/echo: write error: Invalid argument\n"
5132 #. ================== EXCEPTIONS ==================
5134 #: build/C/man7/cpuset.7:1060
5140 #: build/C/man7/cpuset.7:1061
5142 msgid "Memory placement"
5143 msgstr "Memory placement"
5146 #: build/C/man7/cpuset.7:1064
5148 "Not all allocations of system memory are constrained by cpusets, for the "
5149 "following reasons."
5151 "Not all allocations of system memory are constrained by cpusets, for the "
5152 "following reasons."
5155 #: build/C/man7/cpuset.7:1079
5157 "If hot-plug functionality is used to remove all the CPUs that are currently "
5158 "assigned to a cpuset, then the kernel will automatically update the "
5159 "I<cpus_allowed> of all processes attached to CPUs in that cpuset to allow "
5160 "all CPUs. When memory hot-plug functionality for removing memory nodes is "
5161 "available, a similar exception is expected to apply there as well. In "
5162 "general, the kernel prefers to violate cpuset placement, rather than "
5163 "starving a process that has had all its allowed CPUs or memory nodes taken "
5164 "offline. User code should reconfigure cpusets to only refer to online CPUs "
5165 "and memory nodes when using hot-plug to add or remove such resources."
5167 "If hot-plug functionality is used to remove all the CPUs that are currently "
5168 "assigned to a cpuset, then the kernel will automatically update the "
5169 "I<cpus_allowed> of all processes attached to CPUs in that cpuset to allow "
5170 "all CPUs. When memory hot-plug functionality for removing memory nodes is "
5171 "available, a similar exception is expected to apply there as well. In "
5172 "general, the kernel prefers to violate cpuset placement, rather than "
5173 "starving a process that has had all its allowed CPUs or memory nodes taken "
5174 "offline. User code should reconfigure cpusets to only refer to online CPUs "
5175 "and memory nodes when using hot-plug to add or remove such resources."
5178 #: build/C/man7/cpuset.7:1087
5180 "A few kernel-critical, internal memory-allocation requests, marked "
5181 "GFP_ATOMIC, must be satisfied immediately. The kernel may drop some request "
5182 "or malfunction if one of these allocations fail. If such a request cannot "
5183 "be satisfied within the current process's cpuset, then we relax the cpuset, "
5184 "and look for memory anywhere we can find it. It's better to violate the "
5185 "cpuset than stress the kernel."
5187 "A few kernel-critical, internal memory-allocation requests, marked "
5188 "GFP_ATOMIC, must be satisfied immediately. The kernel may drop some request "
5189 "or malfunction if one of these allocations fail. If such a request cannot "
5190 "be satisfied within the current process's cpuset, then we relax the cpuset, "
5191 "and look for memory anywhere we can find it. It's better to violate the "
5192 "cpuset than stress the kernel."
5195 #: build/C/man7/cpuset.7:1091
5197 "Allocations of memory requested by kernel drivers while processing an "
5198 "interrupt lack any relevant process context, and are not confined by cpusets."
5200 "Allocations of memory requested by kernel drivers while processing an "
5201 "interrupt lack any relevant process context, and are not confined by cpusets."
5204 #: build/C/man7/cpuset.7:1091
5206 msgid "Renaming cpusets"
5207 msgstr "Renaming cpusets"
5209 #. ================== ERRORS ==================
5211 #: build/C/man7/cpuset.7:1099
5213 "You can use the B<rename>(2) system call to rename cpusets. Only simple "
5214 "renaming is supported; that is, changing the name of a cpuset directory is "
5215 "permitted, but moving a directory into a different directory is not "
5218 "You can use the B<rename>(2) system call to rename cpusets. Only simple "
5219 "renaming is supported; that is, changing the name of a cpuset directory is "
5220 "permitted, but moving a directory into a different directory is not "
5224 #: build/C/man7/cpuset.7:1103
5226 "The Linux kernel implementation of cpusets sets I<errno> to specify the "
5227 "reason for a failed system call affecting cpusets."
5229 "The Linux kernel implementation of cpusets sets I<errno> to specify the "
5230 "reason for a failed system call affecting cpusets."
5233 #: build/C/man7/cpuset.7:1108
5235 "The possible I<errno> settings and their meaning when set on a failed cpuset "
5236 "call are as listed below."
5238 "The possible I<errno> settings and their meaning when set on a failed cpuset "
5239 "call are as listed below."
5242 #: build/C/man7/cpuset.7:1108
5248 #: build/C/man7/cpuset.7:1115
5250 "Attempted a B<write>(2) on a special cpuset file with a length larger than "
5251 "some kernel-determined upper limit on the length of such writes."
5253 "Attempted a B<write>(2) on a special cpuset file with a length larger than "
5254 "some kernel-determined upper limit on the length of such writes."
5257 #: build/C/man7/cpuset.7:1122
5259 "Attempted to B<write>(2) the process ID (PID) of a process to a cpuset "
5260 "I<tasks> file when one lacks permission to move that process."
5262 "Attempted to B<write>(2) the process ID (PID) of a process to a cpuset "
5263 "I<tasks> file when one lacks permission to move that process."
5266 #: build/C/man7/cpuset.7:1128
5268 "Attempted to add, using B<write>(2), a CPU or memory node to a cpuset, when "
5269 "that CPU or memory node was not already in its parent."
5271 "Attempted to add, using B<write>(2), a CPU or memory node to a cpuset, when "
5272 "that CPU or memory node was not already in its parent."
5275 #: build/C/man7/cpuset.7:1136
5277 "Attempted to set, using B<write>(2), I<cpu_exclusive> or I<mem_exclusive> on "
5278 "a cpuset whose parent lacks the same setting."
5280 "Attempted to set, using B<write>(2), I<cpu_exclusive> or I<mem_exclusive> on "
5281 "a cpuset whose parent lacks the same setting."
5284 #: build/C/man7/cpuset.7:1143
5285 msgid "Attempted to B<write>(2) a I<memory_pressure> file."
5286 msgstr "Attempted to B<write>(2) a I<memory_pressure> file."
5289 #: build/C/man7/cpuset.7:1146
5290 msgid "Attempted to create a file in a cpuset directory."
5291 msgstr "Attempted to create a file in a cpuset directory."
5294 #: build/C/man7/cpuset.7:1146 build/C/man7/cpuset.7:1151
5295 #: build/C/man7/cpuset.7:1156
5301 #: build/C/man7/cpuset.7:1151
5303 "Attempted to remove, using B<rmdir>(2), a cpuset with attached processes."
5305 "Attempted to remove, using B<rmdir>(2), a cpuset with attached processes."
5308 #: build/C/man7/cpuset.7:1156
5309 msgid "Attempted to remove, using B<rmdir>(2), a cpuset with child cpusets."
5310 msgstr "Attempted to remove, using B<rmdir>(2), a cpuset with child cpusets."
5313 #: build/C/man7/cpuset.7:1161
5315 "Attempted to remove a CPU or memory node from a cpuset that is also in a "
5316 "child of that cpuset."
5318 "Attempted to remove a CPU or memory node from a cpuset that is also in a "
5319 "child of that cpuset."
5322 #: build/C/man7/cpuset.7:1161 build/C/man7/cpuset.7:1166
5328 #: build/C/man7/cpuset.7:1166
5329 msgid "Attempted to create, using B<mkdir>(2), a cpuset that already exists."
5330 msgstr "Attempted to create, using B<mkdir>(2), a cpuset that already exists."
5333 #: build/C/man7/cpuset.7:1171
5334 msgid "Attempted to B<rename>(2) a cpuset to a name that already exists."
5335 msgstr "Attempted to B<rename>(2) a cpuset to a name that already exists."
5338 #: build/C/man7/cpuset.7:1179
5340 "Attempted to B<read>(2) or B<write>(2) a cpuset file using a buffer that "
5341 "is outside the writing processes accessible address space."
5343 "Attempted to B<read>(2) or B<write>(2) a cpuset file using a buffer that "
5344 "is outside the writing processes accessible address space."
5347 #: build/C/man7/cpuset.7:1188
5349 "Attempted to change a cpuset, using B<write>(2), in a way that would violate "
5350 "a I<cpu_exclusive> or I<mem_exclusive> attribute of that cpuset or any of "
5353 "Attempted to change a cpuset, using B<write>(2), in a way that would violate "
5354 "a I<cpu_exclusive> or I<mem_exclusive> attribute of that cpuset or any of "
5358 #: build/C/man7/cpuset.7:1197
5360 "Attempted to B<write>(2) an empty I<cpus> or I<mems> list to a cpuset which "
5361 "has attached processes or child cpusets."
5363 "Attempted to B<write>(2) an empty I<cpus> or I<mems> list to a cpuset which "
5364 "has attached processes or child cpusets."
5367 #: build/C/man7/cpuset.7:1207
5369 "Attempted to B<write>(2) a I<cpus> or I<mems> list which included a range "
5370 "with the second number smaller than the first number."
5372 "Attempted to B<write>(2) a I<cpus> or I<mems> list which included a range "
5373 "with the second number smaller than the first number."
5376 #: build/C/man7/cpuset.7:1216
5378 "Attempted to B<write>(2) a I<cpus> or I<mems> list which included an "
5379 "invalid character in the string."
5381 "Attempted to B<write>(2) a I<cpus> or I<mems> list which included an "
5382 "invalid character in the string."
5385 #: build/C/man7/cpuset.7:1223
5387 "Attempted to B<write>(2) a list to a I<cpus> file that did not include any "
5390 "Attempted to B<write>(2) a list to a I<cpus> file that did not include any "
5394 #: build/C/man7/cpuset.7:1230
5396 "Attempted to B<write>(2) a list to a I<mems> file that did not include any "
5397 "online memory nodes."
5399 "Attempted to B<write>(2) a list to a I<mems> file that did not include any "
5400 "online memory nodes."
5403 #: build/C/man7/cpuset.7:1237
5405 "Attempted to B<write>(2) a list to a I<mems> file that included a node that "
5408 "Attempted to B<write>(2) a list to a I<mems> file that included a node that "
5412 #: build/C/man7/cpuset.7:1245
5414 "Attempted to B<write>(2) a string to a cpuset I<tasks> file that does not "
5415 "begin with an ASCII decimal integer."
5417 "Attempted to B<write>(2) a string to a cpuset I<tasks> file that does not "
5418 "begin with an ASCII decimal integer."
5421 #: build/C/man7/cpuset.7:1250
5422 msgid "Attempted to B<rename>(2) a cpuset into a different directory."
5423 msgstr "Attempted to B<rename>(2) a cpuset into a different directory."
5426 #: build/C/man7/cpuset.7:1257
5428 "Attempted to B<read>(2) a I</proc/E<lt>pidE<gt>/cpuset> file for a cpuset "
5429 "path that is longer than the kernel page size."
5431 "Attempted to B<read>(2) a I</proc/E<lt>pidE<gt>/cpuset> file for a cpuset "
5432 "path that is longer than the kernel page size."
5435 #: build/C/man7/cpuset.7:1262
5437 "Attempted to create, using B<mkdir>(2), a cpuset whose base directory name "
5438 "is longer than 255 characters."
5440 "Attempted to create, using B<mkdir>(2), a cpuset whose base directory name "
5441 "is longer than 255 characters."
5444 #: build/C/man7/cpuset.7:1269
5446 "Attempted to create, using B<mkdir>(2), a cpuset whose full pathname, "
5447 "including the mount point (typically \"/dev/cpuset/\") prefix, is longer "
5448 "than 4095 characters."
5450 "Attempted to create, using B<mkdir>(2), a cpuset whose full pathname, "
5451 "including the mount point (typically \"/dev/cpuset/\") prefix, is longer "
5452 "than 4095 characters."
5455 #: build/C/man7/cpuset.7:1269
5461 #: build/C/man7/cpuset.7:1274
5463 "The cpuset was removed by another process at the same time as a B<write>(2) "
5464 "was attempted on one of the pseudo-files in the cpuset directory."
5466 "The cpuset was removed by another process at the same time as a B<write>(2) "
5467 "was attempted on one of the pseudo-files in the cpuset directory."
5470 #: build/C/man7/cpuset.7:1279
5472 "Attempted to create, using B<mkdir>(2), a cpuset in a parent cpuset that "
5475 "Attempted to create, using B<mkdir>(2), a cpuset in a parent cpuset that "
5479 #: build/C/man7/cpuset.7:1286
5481 "Attempted to B<access>(2) or B<open>(2) a nonexistent file in a cpuset "
5484 "Attempted to B<access>(2) or B<open>(2) a nonexistent file in a cpuset "
5488 #: build/C/man7/cpuset.7:1291
5490 "Insufficient memory is available within the kernel; can occur on a variety "
5491 "of system calls affecting cpusets, but only if the system is extremely short "
5494 "Insufficient memory is available within the kernel; can occur on a variety "
5495 "of system calls affecting cpusets, but only if the system is extremely short "
5499 #: build/C/man7/cpuset.7:1291 build/C/man7/cpuset.7:1303
5505 #: build/C/man7/cpuset.7:1303
5507 "Attempted to B<write>(2) the process ID (PID) of a process to a cpuset "
5508 "I<tasks> file when the cpuset had an empty I<cpus> or empty I<mems> setting."
5510 "Attempted to B<write>(2) the process ID (PID) of a process to a cpuset "
5511 "I<tasks> file when the cpuset had an empty I<cpus> or empty I<mems> setting."
5514 #: build/C/man7/cpuset.7:1313
5516 "Attempted to B<write>(2) an empty I<cpus> or I<mems> setting to a cpuset "
5517 "that has tasks attached."
5519 "Attempted to B<write>(2) an empty I<cpus> or I<mems> setting to a cpuset "
5520 "that has tasks attached."
5523 #: build/C/man7/cpuset.7:1318
5524 msgid "Attempted to B<rename>(2) a nonexistent cpuset."
5525 msgstr "Attempted to B<rename>(2) a nonexistent cpuset."
5528 #: build/C/man7/cpuset.7:1321
5529 msgid "Attempted to remove a file from a cpuset directory."
5530 msgstr "Attempted to remove a file from a cpuset directory."
5533 #: build/C/man7/cpuset.7:1321
5539 #: build/C/man7/cpuset.7:1329
5541 "Specified a I<cpus> or I<mems> list to the kernel which included a number "
5542 "too large for the kernel to set in its bitmasks."
5544 "Specified a I<cpus> or I<mems> list to the kernel which included a number "
5545 "too large for the kernel to set in its bitmasks."
5547 #. ================== VERSIONS ==================
5549 #: build/C/man7/cpuset.7:1337
5551 "Attempted to B<write>(2) the process ID (PID) of a nonexistent process to a "
5552 "cpuset I<tasks> file."
5554 "Attempted to B<write>(2) the process ID (PID) of a nonexistent process to a "
5555 "cpuset I<tasks> file."
5557 #. ================== NOTES ==================
5559 #: build/C/man7/cpuset.7:1340
5560 msgid "Cpusets appeared in version 2.6.12 of the Linux kernel."
5561 msgstr "Cpusets appeared in version 2.6.12 of the Linux kernel."
5563 #. ================== BUGS ==================
5565 #: build/C/man7/cpuset.7:1351
5567 "Despite its name, the I<pid> parameter is actually a thread ID, and each "
5568 "thread in a threaded group can be attached to a different cpuset. The value "
5569 "returned from a call to B<gettid>(2) can be passed in the argument I<pid>."
5571 "Despite its name, the I<pid> parameter is actually a thread ID, and each "
5572 "thread in a threaded group can be attached to a different cpuset. The value "
5573 "returned from a call to B<gettid>(2) can be passed in the argument I<pid>."
5576 #: build/C/man7/cpuset.7:1351 build/C/man2/getrlimit.2:576
5577 #: build/C/man2/ioprio_set.2:308 build/C/man2/setfsgid.2:102
5578 #: build/C/man2/setfsuid.2:102
5583 #. ================== EXAMPLE ==================
5585 #: build/C/man7/cpuset.7:1364
5587 "I<memory_pressure> cpuset files can be opened for writing, creation, or "
5588 "truncation, but then the B<write>(2) fails with I<errno> set to B<EACCES>, "
5589 "and the creation and truncation options on B<open>(2) have no effect."
5591 "I<memory_pressure> cpuset files can be opened for writing, creation, or "
5592 "truncation, but then the B<write>(2) fails with I<errno> set to B<EACCES>, "
5593 "and the creation and truncation options on B<open>(2) have no effect."
5596 #: build/C/man7/cpuset.7:1364 build/C/man2/getrlimit.2:520
5602 #: build/C/man7/cpuset.7:1367
5604 "The following examples demonstrate querying and setting cpuset options using "
5607 "The following examples demonstrate querying and setting cpuset options using "
5611 #: build/C/man7/cpuset.7:1367
5613 msgid "Creating and attaching to a cpuset."
5614 msgstr "Creating and attaching to a cpuset."
5617 #: build/C/man7/cpuset.7:1370
5619 "To create a new cpuset and attach the current command shell to it, the steps "
5622 "To create a new cpuset and attach the current command shell to it, the steps "
5626 #: build/C/man7/cpuset.7:1372 build/C/man7/cpuset.7:1411
5632 #: build/C/man7/cpuset.7:1374
5633 msgid "mkdir /dev/cpuset (if not already done)"
5634 msgstr "mkdir /dev/cpuset (if not already done)"
5637 #: build/C/man7/cpuset.7:1374 build/C/man7/cpuset.7:1417
5643 #: build/C/man7/cpuset.7:1376
5644 msgid "mount -t cpuset none /dev/cpuset (if not already done)"
5645 msgstr "mount -t cpuset none /dev/cpuset (if not already done)"
5648 #: build/C/man7/cpuset.7:1376 build/C/man7/cpuset.7:1420
5654 #: build/C/man7/cpuset.7:1379
5655 msgid "Create the new cpuset using B<mkdir>(1)."
5656 msgstr "Create the new cpuset using B<mkdir>(1)."
5659 #: build/C/man7/cpuset.7:1379 build/C/man7/cpuset.7:1423
5665 #: build/C/man7/cpuset.7:1381
5666 msgid "Assign CPUs and memory nodes to the new cpuset."
5667 msgstr "Assign CPUs and memory nodes to the new cpuset."
5670 #: build/C/man7/cpuset.7:1381 build/C/man7/cpuset.7:1428
5676 #: build/C/man7/cpuset.7:1383
5677 msgid "Attach the shell to the new cpuset."
5678 msgstr "Attach the shell to the new cpuset."
5681 #: build/C/man7/cpuset.7:1388
5683 "For example, the following sequence of commands will set up a cpuset named "
5684 "\"Charlie\", containing just CPUs 2 and 3, and memory node 1, and then "
5685 "attach the current shell to that cpuset."
5687 "For example, the following sequence of commands will set up a cpuset named "
5688 "\"Charlie\", containing just CPUs 2 and 3, and memory node 1, and then "
5689 "attach the current shell to that cpuset."
5692 #: build/C/man7/cpuset.7:1402
5695 "$B< mkdir /dev/cpuset>\n"
5696 "$B< mount -t cpuset cpuset /dev/cpuset>\n"
5697 "$B< cd /dev/cpuset>\n"
5698 "$B< mkdir Charlie>\n"
5700 "$B< /bin/echo 2-3 E<gt> cpus>\n"
5701 "$B< /bin/echo 1 E<gt> mems>\n"
5702 "$B< /bin/echo $$ E<gt> tasks>\n"
5703 "# The current shell is now running in cpuset Charlie\n"
5704 "# The next line should display '/Charlie'\n"
5705 "$B< cat /proc/self/cpuset>\n"
5707 "$B< mkdir /dev/cpuset>\n"
5708 "$B< mount -t cpuset cpuset /dev/cpuset>\n"
5709 "$B< cd /dev/cpuset>\n"
5710 "$B< mkdir Charlie>\n"
5712 "$B< /bin/echo 2-3 E<gt> cpus>\n"
5713 "$B< /bin/echo 1 E<gt> mems>\n"
5714 "$B< /bin/echo $$ E<gt> tasks>\n"
5715 "# The current shell is now running in cpuset Charlie\n"
5716 "# The next line should display '/Charlie'\n"
5717 "$B< cat /proc/self/cpuset>\n"
5720 #: build/C/man7/cpuset.7:1404
5722 msgid "Migrating a job to different memory nodes."
5723 msgstr "Migrating a job to different memory nodes."
5726 #: build/C/man7/cpuset.7:1409
5728 "To migrate a job (the set of processes attached to a cpuset) to different "
5729 "CPUs and memory nodes in the system, including moving the memory pages "
5730 "currently allocated to that job, perform the following steps."
5732 "To migrate a job (the set of processes attached to a cpuset) to different "
5733 "CPUs and memory nodes in the system, including moving the memory pages "
5734 "currently allocated to that job, perform the following steps."
5737 #: build/C/man7/cpuset.7:1417
5739 "Let's say we want to move the job in cpuset I<alpha> (CPUs 4-7 and memory "
5740 "nodes 2-3) to a new cpuset I<beta> (CPUs 16-19 and memory nodes 8-9)."
5742 "Let's say we want to move the job in cpuset I<alpha> (CPUs 4-7 and memory "
5743 "nodes 2-3) to a new cpuset I<beta> (CPUs 16-19 and memory nodes 8-9)."
5746 #: build/C/man7/cpuset.7:1420
5747 msgid "First create the new cpuset I<beta>."
5748 msgstr "First create the new cpuset I<beta>."
5751 #: build/C/man7/cpuset.7:1423
5752 msgid "Then allow CPUs 16-19 and memory nodes 8-9 in I<beta>."
5753 msgstr "Then allow CPUs 16-19 and memory nodes 8-9 in I<beta>."
5756 #: build/C/man7/cpuset.7:1428
5757 msgid "Then enable I<memory_migration> in I<beta>."
5758 msgstr "Then enable I<memory_migration> in I<beta>."
5761 #: build/C/man7/cpuset.7:1433
5762 msgid "Then move each process from I<alpha> to I<beta>."
5763 msgstr "Then move each process from I<alpha> to I<beta>."
5766 #: build/C/man7/cpuset.7:1436
5767 msgid "The following sequence of commands accomplishes this."
5768 msgstr "The following sequence of commands accomplishes this."
5771 #: build/C/man7/cpuset.7:1446
5774 "$B< cd /dev/cpuset>\n"
5777 "$B< /bin/echo 16-19 E<gt> cpus>\n"
5778 "$B< /bin/echo 8-9 E<gt> mems>\n"
5779 "$B< /bin/echo 1 E<gt> memory_migrate>\n"
5780 "$B< while read i; do /bin/echo $i; done E<lt> ../alpha/tasks E<gt> tasks>\n"
5782 "$B< cd /dev/cpuset>\n"
5785 "$B< /bin/echo 16-19 E<gt> cpus>\n"
5786 "$B< /bin/echo 8-9 E<gt> mems>\n"
5787 "$B< /bin/echo 1 E<gt> memory_migrate>\n"
5788 "$B< while read i; do /bin/echo $i; done E<lt> ../alpha/tasks E<gt> tasks>\n"
5791 #: build/C/man7/cpuset.7:1455
5793 "The above should move any processes in I<alpha> to I<beta>, and any memory "
5794 "held by these processes on memory nodes 2-3 to memory nodes 8-9, "
5797 "The above should move any processes in I<alpha> to I<beta>, and any memory "
5798 "held by these processes on memory nodes 2-3 to memory nodes 8-9, "
5802 #: build/C/man7/cpuset.7:1457
5803 msgid "Notice that the last step of the above sequence did not do:"
5804 msgstr "Notice that the last step of the above sequence did not do:"
5807 #: build/C/man7/cpuset.7:1461
5809 msgid "$B< cp ../alpha/tasks tasks>\n"
5810 msgstr "$B< cp ../alpha/tasks tasks>\n"
5813 #: build/C/man7/cpuset.7:1472
5815 "The I<while> loop, rather than the seemingly easier use of the B<cp>(1) "
5816 "command, was necessary because only one process PID at a time may be written "
5817 "to the I<tasks> file."
5819 "The I<while> loop, rather than the seemingly easier use of the B<cp>(1) "
5820 "command, was necessary because only one process PID at a time may be written "
5821 "to the I<tasks> file."
5824 #: build/C/man7/cpuset.7:1480
5826 "The same effect (writing one PID at a time) as the I<while> loop can be "
5827 "accomplished more efficiently, in fewer keystrokes and in syntax that works "
5828 "on any shell, but alas more obscurely, by using the B<-u> (unbuffered) "
5829 "option of B<sed>(1):"
5831 "The same effect (writing one PID at a time) as the I<while> loop can be "
5832 "accomplished more efficiently, in fewer keystrokes and in syntax that works "
5833 "on any shell, but alas more obscurely, by using the B<-u> (unbuffered) "
5834 "option of B<sed>(1):"
5837 #: build/C/man7/cpuset.7:1484
5839 msgid "$B< sed -un p E<lt> ../alpha/tasks E<gt> tasks>\n"
5840 msgstr "$B< sed -un p E<lt> ../alpha/tasks E<gt> tasks>\n"
5843 #: build/C/man7/cpuset.7:1501
5845 "B<taskset>(1), B<get_mempolicy>(2), B<getcpu>(2), B<mbind>(2), "
5846 "B<sched_getaffinity>(2), B<sched_setaffinity>(2), B<sched_setscheduler>(2), "
5847 "B<set_mempolicy>(2), B<CPU_SET>(3), B<proc>(5), B<numa>(7), B<migratepages>"
5848 "(8), B<numactl>(8)"
5850 "B<taskset>(1), B<get_mempolicy>(2), B<getcpu>(2), B<mbind>(2), "
5851 "B<sched_getaffinity>(2), B<sched_setaffinity>(2), B<sched_setscheduler>(2), "
5852 "B<set_mempolicy>(2), B<CPU_SET>(3), B<proc>(5), B<numa>(7), B<migratepages>"
5853 "(8), B<numactl>(8)"
5856 #: build/C/man7/cpuset.7:1504
5857 msgid "The kernel source file I<Documentation/cpusets.txt>."
5858 msgstr "The kernel source file I<Documentation/cpusets.txt>."
5861 #: build/C/man7/credentials.7:25
5864 msgstr "CREDENTIALS"
5867 #: build/C/man7/credentials.7:25
5873 #: build/C/man7/credentials.7:28
5874 msgid "credentials - process identifiers"
5875 msgstr "credentials - 認証に用いられるプロセスの識別子"
5878 #: build/C/man7/credentials.7:29
5880 msgid "Process ID (PID)"
5881 msgstr "プロセスID (PID)"
5884 #: build/C/man7/credentials.7:39
5886 "Each process has a unique nonnegative integer identifier that is assigned "
5887 "when the process is created using B<fork>(2). A process can obtain its PID "
5888 "using B<getpid>(2). A PID is represented using the type I<pid_t> (defined "
5889 "in I<E<lt>sys/types.hE<gt>>)."
5891 "各プロセスは、負でない整数の一意な識別子を持つ。 この識別子は B<fork>(2) を"
5892 "使ってプロセスが生成される際に割り当てられる。 プロセスは B<getpid>(2) を"
5893 "使って自分の PID を取得できる。 PID は I<pid_t> 型で表現される (I<pid_t> は "
5894 "I<E<lt>sys/types.hE<gt>> で定義されている)。"
5896 #. .BR sched_rr_get_interval (2),
5897 #. .BR sched_getaffinity (2),
5898 #. .BR sched_setaffinity (2),
5899 #. .BR sched_getparam (2),
5900 #. .BR sched_setparam (2),
5901 #. .BR sched_setscheduler (2),
5902 #. .BR sched_getscheduler (2),
5907 #: build/C/man7/credentials.7:60
5909 "PIDs are used in a range of system calls to identify the process affected by "
5910 "the call, for example: B<kill>(2), B<ptrace>(2), B<setpriority>(2) "
5911 "B<setpgid>(2), B<setsid>(2), B<sigqueue>(3), and B<waitpid>(2)."
5913 "PID は各種のシステムコールでそのシステムコールが作用するプロセスを 特定するた"
5914 "めに使用される。以下に例を挙げる: B<kill>(2), B<ptrace>(2), B<setpriority>"
5915 "(2), B<setpgid>(2), B<setsid>(2), B<sigqueue>(3), B<waitpid>(2)."
5918 #: build/C/man7/credentials.7:63
5919 msgid "A process's PID is preserved across an B<execve>(2)."
5920 msgstr "プロセスの PID は B<execve>(2) の前後で不変である。"
5923 #: build/C/man7/credentials.7:63
5925 msgid "Parent Process ID (PPID)"
5926 msgstr "親プロセス ID (PPID)"
5929 #: build/C/man7/credentials.7:71
5931 "A process's parent process ID identifies the process that created this "
5932 "process using B<fork>(2). A process can obtain its PPID using B<getppid>"
5933 "(2). A PPID is represented using the type I<pid_t>."
5935 "プロセスの親プロセスの ID は、 B<fork>(2) を使ってそのプロセスを生成したプロ"
5936 "セスを示す。 プロセスは B<getppid>(2) を使って自分の PPID を取得できる。 "
5937 "PPID は I<pid_t> 型で表現される。"
5940 #: build/C/man7/credentials.7:74
5941 msgid "A process's PPID is preserved across an B<execve>(2)."
5942 msgstr "プロセスの PPID は B<execve>(2) の前後で不変である。"
5945 #: build/C/man7/credentials.7:74
5947 msgid "Process Group ID and Session ID"
5948 msgstr "プロセスグループ ID とセッション ID"
5951 #: build/C/man7/credentials.7:82
5953 "Each process has a session ID and a process group ID, both represented using "
5954 "the type I<pid_t>. A process can obtain its session ID using B<getsid>(2), "
5955 "and its process group ID using B<getpgrp>(2)."
5957 "各プロセスはセッション ID とプロセスグループ ID を持つ。 これらの ID はどちら"
5958 "も I<pid_t> 型で表現される。 プロセスは、それぞれ B<getsid>(2), B<getpgrp>"
5959 "(2) を使って自分のセッション ID、プロセスグループ ID を取得できる。"
5962 #: build/C/man7/credentials.7:88
5964 "A child created by B<fork>(2) inherits its parent's session ID and process "
5965 "group ID. A process's session ID and process group ID are preserved across "
5968 "B<fork>(2) で生成された子プロセスは親プロセスのセッション ID とプロセスグ"
5969 "ループ ID を継承する。プロセスのセッション ID とプロセスグループ ID は "
5970 "B<execve>(2) の前後で不変である。"
5973 #: build/C/man7/credentials.7:101
5975 "Sessions and process groups are abstractions devised to support shell job "
5976 "control. A process group (sometimes called a \"job\") is a collection of "
5977 "processes that share the same process group ID; the shell creates a new "
5978 "process group for the process(es) used to execute single command or pipeline "
5979 "(e.g., the two processes created to execute the command \"ls\\ |\\ wc\" are "
5980 "placed in the same process group). A process's group membership can be set "
5981 "using B<setpgid>(2). The process whose process ID is the same as its "
5982 "process group ID is the I<process group leader> for that group."
5984 "セッションとプロセスグループの概念は、シェルのジョブ制御を行うために 考案され"
5985 "たものである。 プロセスグループ (時には「ジョブ」と呼ばれることもある) は、 "
5986 "同じプロセスグループ ID を共有するプロセスの集まりである。 シェルは、一つのコ"
5987 "マンドもしくはパイプラインの実行に使われるプロセス群に 対して一つのプロセスグ"
5988 "ループを生成する (例えば、コマンド \"ls\\ |\\ wc\" を実行するために生成される"
5989 "二つのプロセスは 同じプロセスグループに置かれる)。 所属するプロセスグループ"
5990 "は B<setpgid>(2) を使って設定できる。 自身のプロセス ID がプロセスグループ "
5991 "ID と同じプロセスは、 そのグループの「プロセスグループ・リーダー」である。"
5994 #: build/C/man7/credentials.7:113
5996 "A session is a collection of processes that share the same session ID. All "
5997 "of the members of a process group also have the same session ID (i.e., all "
5998 "of the members of a process group always belong to the same session, so that "
5999 "sessions and process groups form a strict two-level hierarchy of "
6000 "processes.) A new session is created when a process calls B<setsid>(2), "
6001 "which creates a new session whose session ID is the same as the PID of the "
6002 "process that called B<setsid>(2). The creator of the session is called the "
6003 "I<session leader>."
6005 "セッションは、同じセッション ID を共有するプロセスの集まりである。 ある一つの"
6006 "プロセスグループの全メンバーは同じセッション ID を持つ (つまり、一つのプロセ"
6007 "スグループのメンバーは全て同じセッションに所属し、 これにより、セッションとプ"
6008 "ロセスグループで二階層のプロセス階層が形成できる)。 新たなセッションの生成は"
6009 "プロセスが B<setsid>(2) を呼び出すことで行う。 B<setsid>(2) は、 B<setsid>"
6010 "(2) を呼び出したプロセスの PID と同じ値のセッション ID を持つ 新たなセッショ"
6011 "ンを生成する。 セッションの生成者は「セッション・リーダー」と呼ばれる。"
6014 #: build/C/man7/credentials.7:113
6016 msgid "User and Group Identifiers"
6017 msgstr "ユーザ ID とグループ ID"
6020 #: build/C/man7/credentials.7:121
6022 "Each process has various associated user and groups IDs. These IDs are "
6023 "integers, respectively represented using the types I<uid_t> and I<gid_t> "
6024 "(defined in I<E<lt>sys/types.hE<gt>>)."
6026 "各プロセスは、数種類のユーザ ID とグループ ID を持つ。 ユーザ ID、グループ "
6027 "ID は整数で、それぞれ I<uid_t>, I<gid_t> 型で表現される (これらは I<E<lt>sys/"
6028 "types.hE<gt>> で定義されている)。"
6031 #: build/C/man7/credentials.7:123
6032 msgid "On Linux, each process has the following user and group identifiers:"
6034 "Linux では、各プロセスは以下のような種類のユーザ ID とグループ ID を持つ。"
6037 #: build/C/man7/credentials.7:129
6039 "Real user ID and real group ID. These IDs determine who owns the process. "
6040 "A process can obtain its real user (group) ID using B<getuid>(2) (B<getgid>"
6043 "実ユーザ ID と実グループ ID。 これらの ID によりプロセスの所有者が決定され"
6044 "る。 プロセスが自分の実ユーザ ID、実グループ ID を取得するには、それぞれ "
6045 "B<getuid>(2), B<getgid>(2) を使用する。"
6048 #: build/C/man7/credentials.7:141
6050 "Effective user ID and effective group ID. These IDs are used by the kernel "
6051 "to determine the permissions that the process will have when accessing "
6052 "shared resources such as message queues, shared memory, and semaphores. On "
6053 "most UNIX systems, these IDs also determine the permissions when accessing "
6054 "files. However, Linux uses the file system IDs described below for this "
6055 "task. A process can obtain its effective user (group) ID using B<geteuid>"
6056 "(2) (B<getegid>(2))."
6058 "実効ユーザ ID と実効グループ ID。 これらの ID は、メッセージキュー、共有メモ"
6059 "リ、セマフォなどの 共有リソースにアクセスしようとした際にそのプロセスがアクセ"
6060 "ス許可を 持っているかをカーネルが判定するのに使用される。 ほとんどの UNIX シ"
6061 "ステムでは、これらの ID はファイルへのアクセス時の アクセス許可の判定にも使用"
6062 "される。 しかしながら、Linux ではファイルへのアクセス許可の判定には 後述の"
6063 "ファイルシステム ID が使用される。 プロセスが自分の実効ユーザ ID、実効グルー"
6064 "プ ID を取得するには、それぞれ B<geteuid>(2), B<getegid>(2) を使用する。"
6067 #: build/C/man7/credentials.7:163
6069 "Saved set-user-ID and saved set-group-ID. These IDs are used in set-user-ID "
6070 "and set-group-ID programs to save a copy of the corresponding effective IDs "
6071 "that were set when the program was executed (see B<execve>(2)). A set-user-"
6072 "ID program can assume and drop privileges by switching its effective user ID "
6073 "back and forth between the values in its real user ID and saved set-user-"
6074 "ID. This switching is done via calls to B<seteuid>(2), B<setreuid>(2), or "
6075 "B<setresuid>(2). A set-group-ID program performs the analogous tasks using "
6076 "B<setegid>(2), B<setregid>(2), or B<setresgid>(2). A process can obtain its "
6077 "saved set-user-ID (set-group-ID) using B<getresuid>(2) (B<getresgid>(2))."
6079 "保存 (saved) set-user-ID と保存 set-group-ID。 これらの ID は、set-user-ID "
6080 "や set-group-ID されたプログラムにおいて、 プログラムの実行時に設定された実"
6081 "効 ID のコピーを保存するために 使用される (B<execve>(2) 参照)。 set-user-ID "
6082 "プログラムは、実効ユーザ ID を実ユーザID と保存 set-user-ID の間で行ったり来"
6083 "たり切り替えることで、特権を得たり落としたりできる。 この切り替えは "
6084 "B<seteuid>(2), B<setreuid>(2), B<setresuid>(2) を呼び出すことで実行できる。 "
6085 "set-group-ID プログラムは、 B<setegid>(2), B<setregid>(2), B<setresgid>(2) "
6086 "を使って同様のことができる。 プロセスが自分の保存 set-user-ID、保存 set-"
6087 "group-ID を取得するには、 B<getresuid(2),> B<getresgids>(2) をそれぞれ使用す"
6091 #: build/C/man7/credentials.7:180
6093 "File system user ID and file system group ID (Linux-specific). These IDs, "
6094 "in conjunction with the supplementary group IDs described below, are used to "
6095 "determine permissions for accessing files; see B<path_resolution>(7) for "
6096 "details. Whenever a process's effective user (group) ID is changed, the "
6097 "kernel also automatically changes the file system user (group) ID to the "
6098 "same value. Consequently, the file system IDs normally have the same values "
6099 "as the corresponding effective ID, and the semantics for file-permission "
6100 "checks are thus the same on Linux as on other UNIX systems. The file system "
6101 "IDs can be made to differ from the effective IDs by calling B<setfsuid>(2) "
6102 "and B<setfsgid>(2)."
6104 "ファイルシステム・ユーザ ID とファイルシステム・グループ ID (Linux 固有)。 こ"
6105 "れらの ID は、後述の補助グループ ID と組み合わせて使用され、 ファイルへのアク"
6106 "セス権の決定に利用される。詳細は B<path_resolution>(7) を参照。 プロセスの実"
6107 "効 ID (ユーザ ID や グループ ID) が変更されるたびに、 カーネルは自動的に対応"
6108 "するファイルシステム ID を同じ値に変更する。 その結果、ファイルシステム ID は"
6109 "通常は対応する実効 ID と同じ値となり、 ファイルのアクセス権のチェック方法は "
6110 "Linux と他の UNIX システムで同じである。 ファイルシステム ID は実効 ID とは異"
6111 "なる値にすることができ、 変更は B<setfsuid>(2) と B<setfsgid>(2) を呼び出し"
6114 #. Since kernel 2.6.4, the limit is visible via the read-only file
6115 #. /proc/sys/kernel/ngroups_max.
6116 #. As at 2.6.22-rc2, this file is still read-only.
6118 #: build/C/man7/credentials.7:199
6120 "Supplementary group IDs. This is a set of additional group IDs that are "
6121 "used for permission checks when accessing files and other shared resources. "
6122 "On Linux kernels before 2.6.4, a process can be a member of up to 32 "
6123 "supplementary groups; since kernel 2.6.4, a process can be a member of up to "
6124 "65536 supplementary groups. The call I<sysconf(_SC_NGROUPS_MAX)> can be "
6125 "used to determine the number of supplementary groups of which a process may "
6126 "be a member. A process can obtain its set of supplementary group IDs using "
6127 "B<getgroups>(2), and can modify the set using B<setgroups>(2)."
6129 "補助グループ ID。 この ID は、ファイルや他の共有リソースへのアクセス時にアク"
6130 "セス許可の チェックに使用される、追加のグループ ID の集合である。 カーネル "
6131 "2.6.4 より前の Linux では、一つのプロセスあたりの 補助グループのメンバー数は"
6132 "最大で 32 である。 カーネル 2.6.4 以降では、一つのプロセスあたりの 補助グルー"
6133 "プのメンバー数は最大で 65536 である。 I<sysconf(_SC_NGROUPS_MAX)> を呼び出す"
6134 "ことで、あるプロセスがメンバーとなることができる可能性のある 補助グループ数を"
6135 "知ることができる。 プロセスは、自分の補助グループ ID の集合を B<getgroups>"
6136 "(2) で取得でき、 B<setgroups>(2) で集合を変更できる。"
6139 #: build/C/man7/credentials.7:209
6141 "A child process created by B<fork>(2) inherits copies of its parent's user "
6142 "and groups IDs. During an B<execve>(2), a process's real user and group ID "
6143 "and supplementary group IDs are preserved; the effective and saved set IDs "
6144 "may be changed, as described in B<execve>(2)."
6146 "B<fork>(2) で生成された子プロセスは親プロセスのユーザ ID とグループ ID を継"
6147 "承する。 B<execve>(2) の間、プロセスの実ユーザ/グループ ID と補助グループ "
6148 "ID 集合は不変である。 実効 ID と保存セット ID は変更される可能性がある "
6149 "(B<execve>(2) で説明されている)。"
6152 #: build/C/man7/credentials.7:212
6154 "Aside from the purposes noted above, a process's user IDs are also employed "
6155 "in a number of other contexts:"
6156 msgstr "上記の目的以外にも、プロセスのユーザ ID は他の様々な場面で利用される。"
6159 #: build/C/man7/credentials.7:215
6161 "when determining the permissions for sending signals\\(emsee B<kill>(2);"
6162 msgstr "シグナルを送る許可の判定時\\(em B<kill>(2) 参照。"
6165 #: build/C/man7/credentials.7:225
6167 "when determining the permissions for setting process-scheduling parameters "
6168 "(nice value, real time scheduling policy and priority, CPU affinity, I/O "
6169 "priority) using B<setpriority>(2), B<sched_setaffinity>(2), "
6170 "B<sched_setscheduler>(2), B<sched_setparam>(2), and B<ioprio_set>(2);"
6172 "プロセスのスケジューリング関連のパラメータ (nice 値、 リアルタイム・スケ"
6173 "ジューリングポリシーや優先度、CPU affinity、 入出力優先度) の設定許可の判定"
6174 "時。 スケジューリング関連のパラメータ設定には B<setpriority>(2), "
6175 "B<sched_setaffinity>(2), B<sched_setscheduler>(2), B<sched_setparam>(2), "
6176 "B<ioprio_set>(2) が使用される。"
6179 #: build/C/man7/credentials.7:228
6180 msgid "when checking resource limits; see B<getrlimit>(2);"
6181 msgstr "リソース上限のチェック時。 B<getrlimit>(2) 参照。"
6184 #: build/C/man7/credentials.7:232
6186 "when checking the limit on the number of inotify instances that the process "
6187 "may create; see B<inotify>(7)."
6189 "プロセスが生成できる inotify インスタンス数の上限のチェック時。 B<inotify>"
6193 #: build/C/man7/credentials.7:238
6195 "Process IDs, parent process IDs, process group IDs, and session IDs are "
6196 "specified in POSIX.1-2001. The real, effective, and saved set user and "
6197 "groups IDs, and the supplementary group IDs, are specified in POSIX.1-2001. "
6198 "The file system user and group IDs are a Linux extension."
6200 "プロセス ID、親プロセス ID、プロセスグループ ID、セッション ID は "
6201 "POSIX.1-2001 で規定されている。 実 ID、実効 ID、保存セット ID のユーザ ID / "
6202 "グループ ID および 補助グループ ID は POSIX.1-2001 で規定されている。 ファイ"
6203 "ルシステム・ユーザ ID / グループ ID は Linux による拡張である。"
6206 #: build/C/man7/credentials.7:250
6208 "The POSIX threads specification requires that credentials are shared by all "
6209 "of the threads in a process. However, at the kernel level, Linux maintains "
6210 "separate user and group credentials for each thread. The NPTL threading "
6211 "implementation does some work to ensure that any change to user or group "
6212 "credentials (e.g., calls to B<setuid>(2), B<setresuid>(2), etc.) is carried "
6213 "through to all of the POSIX threads in a process."
6215 "POSIX のスレッド仕様では、これらの識別子がプロセス内の全スレッドで 共有される"
6216 "ことを求めている。 しかしながら、カーネルのレベルでは、Linux はスレッド毎に"
6217 "別々の ユーザとグループに関する識別子を管理している。 NPTL スレッド実装が、"
6218 "(例えば B<setuid>(2), B<setresuid>(2) などの呼び出しによる) ユーザやグループ"
6219 "に関する識別子に対する変更が プロセス内の全ての POSIX スレッドに対して反映さ"
6220 "れることを保証する ための処理を行っている。"
6223 #: build/C/man7/credentials.7:281
6225 "B<bash>(1), B<csh>(1), B<ps>(1), B<access>(2), B<execve>(2), B<faccessat>"
6226 "(2), B<fork>(2), B<getpgrp>(2), B<getpid>(2), B<getppid>(2), B<getsid>(2), "
6227 "B<kill>(2), B<killpg>(2), B<setegid>(2), B<seteuid>(2), B<setfsgid>(2), "
6228 "B<setfsuid>(2), B<setgid>(2), B<setgroups>(2), B<setresgid>(2), B<setresuid>"
6229 "(2), B<setuid>(2), B<waitpid>(2), B<euidaccess>(3), B<initgroups>(3), "
6230 "B<tcgetpgrp>(3), B<tcsetpgrp>(3), B<capabilities>(7), B<path_resolution>(7), "
6233 "B<bash>(1), B<csh>(1), B<ps>(1), B<access>(2), B<execve>(2), B<faccessat>"
6234 "(2), B<fork>(2), B<getpgrp>(2), B<getpid>(2), B<getppid>(2), B<getsid>(2), "
6235 "B<kill>(2), B<killpg>(2), B<setegid>(2), B<seteuid>(2), B<setfsgid>(2), "
6236 "B<setfsuid>(2), B<setgid>(2), B<setgroups>(2), B<setresgid>(2), B<setresuid>"
6237 "(2), B<setuid>(2), B<waitpid>(2), B<euidaccess>(3), B<initgroups>(3), "
6238 "B<tcgetpgrp>(3), B<tcsetpgrp>(3), B<capabilities>(7), B<path_resolution>(7), "
6242 #: build/C/man2/getgid.2:25
6248 #: build/C/man2/getgid.2:25 build/C/man2/getgroups.2:31
6249 #: build/C/man2/getresuid.2:27 build/C/man2/getuid.2:26
6250 #: build/C/man2/setfsgid.2:29 build/C/man2/setfsuid.2:29
6251 #: build/C/man2/setgid.2:27 build/C/man2/setresuid.2:26
6252 #: build/C/man2/setreuid.2:43 build/C/man2/setuid.2:28
6258 #: build/C/man2/getgid.2:28
6259 msgid "getgid, getegid - get group identity"
6260 msgstr "getgid, getegid - グループ ID を得る"
6263 #: build/C/man2/getgid.2:30 build/C/man2/getgroups.2:38
6264 #: build/C/man2/getpid.2:30 build/C/man2/getresuid.2:34
6265 #: build/C/man2/getsid.2:30 build/C/man2/getuid.2:31 build/C/man2/seteuid.2:34
6266 #: build/C/man2/setgid.2:34 build/C/man2/setpgid.2:51
6267 #: build/C/man2/setresuid.2:33 build/C/man2/setreuid.2:50
6268 #: build/C/man2/setsid.2:35 build/C/man2/setuid.2:35
6269 msgid "B<#include E<lt>unistd.hE<gt>>"
6270 msgstr "B<#include E<lt>unistd.hE<gt>>"
6273 #: build/C/man2/getgid.2:32 build/C/man2/getgroups.2:36
6274 #: build/C/man2/getpid.2:28 build/C/man2/getuid.2:33 build/C/man2/seteuid.2:32
6275 #: build/C/man2/setgid.2:32 build/C/man2/setreuid.2:48
6276 #: build/C/man2/setuid.2:33
6277 msgid "B<#include E<lt>sys/types.hE<gt>>"
6278 msgstr "B<#include E<lt>sys/types.hE<gt>>"
6281 #: build/C/man2/getgid.2:34
6282 msgid "B<gid_t getgid(void);>"
6283 msgstr "B<gid_t getgid(void);>"
6286 #: build/C/man2/getgid.2:36
6287 msgid "B<gid_t getegid(void);>"
6288 msgstr "B<gid_t getegid(void);>"
6291 #: build/C/man2/getgid.2:39
6292 msgid "B<getgid>() returns the real group ID of the calling process."
6293 msgstr "B<getgid>() は呼び出し元のプロセスの実グループ ID を返す。"
6296 #: build/C/man2/getgid.2:42
6297 msgid "B<getegid>() returns the effective group ID of the calling process."
6298 msgstr "B<getegid>() は呼び出し元のプロセスの実効グループ ID を返す。"
6301 #: build/C/man2/getgid.2:44 build/C/man2/getpid.2:44 build/C/man2/getuid.2:45
6302 msgid "These functions are always successful."
6303 msgstr "これらの関数は常に成功する。"
6306 #: build/C/man2/getgid.2:46 build/C/man2/getuid.2:47
6307 msgid "POSIX.1-2001, 4.3BSD."
6308 msgstr "POSIX.1-2001, 4.3BSD."
6311 #: build/C/man2/getgid.2:62
6313 "The original Linux B<getgid>() and B<getegid>() system calls supported "
6314 "only 16-bit group IDs. Subsequently, Linux 2.4 added B<getgid32>() and "
6315 "B<getegid32>(), supporting 32-bit IDs. The glibc B<getgid>() and B<getegid>"
6316 "() wrapper functions transparently deal with the variations across kernel "
6319 "元々の Linux の B<getgid>() と B<getegid>() システムコールは\n"
6320 "16 ビットのグループ ID だけに対応していた。\n"
6321 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
6322 "B<getgid32>() と B<getegid32>() が追加された。\n"
6323 "glibc の B<getgid>() と B<getegid>() のラッパー関数は\n"
6324 "カーネルバージョンによるこの違いを吸収している。"
6327 #: build/C/man2/getgid.2:67
6328 msgid "B<getresgid>(2), B<setgid>(2), B<setregid>(2), B<credentials>(7)"
6329 msgstr "B<getresgid>(2), B<setgid>(2), B<setregid>(2), B<credentials>(7)"
6332 #: build/C/man2/getgroups.2:31
6338 #: build/C/man2/getgroups.2:34
6339 msgid "getgroups, setgroups - get/set list of supplementary group IDs"
6340 msgstr "getgroups, setgroups - 補助グループ ID のリストを取得/設定する"
6343 #: build/C/man2/getgroups.2:40
6344 msgid "B<int getgroups(int >I<size>B<, gid_t >I<list>B<[]);>"
6345 msgstr "B<int getgroups(int >I<size>B<, gid_t >I<list>B<[]);>"
6348 #: build/C/man2/getgroups.2:42
6349 msgid "B<#include E<lt>grp.hE<gt>>"
6350 msgstr "B<#include E<lt>grp.hE<gt>>"
6353 #: build/C/man2/getgroups.2:44
6354 msgid "B<int setgroups(size_t >I<size>B<, const gid_t *>I<list>B<);>"
6355 msgstr "B<int setgroups(size_t >I<size>B<, const gid_t *>I<list>B<);>"
6358 #: build/C/man2/getgroups.2:52
6359 msgid "B<setgroups>(): _BSD_SOURCE"
6360 msgstr "B<setgroups>(): _BSD_SOURCE"
6363 #: build/C/man2/getgroups.2:70
6365 "B<getgroups>() returns the supplementary group IDs of the calling process "
6366 "in I<list>. The argument I<size> should be set to the maximum number of "
6367 "items that can be stored in the buffer pointed to by I<list>. If the "
6368 "calling process is a member of more than I<size> supplementary groups, then "
6369 "an error results. It is unspecified whether the effective group ID of the "
6370 "calling process is included in the returned list. (Thus, an application "
6371 "should also call B<getegid>(2) and add or remove the resulting value.)"
6373 "B<getgroups>() は呼び出し元プロセスの補助グループ (supplementary group) ID "
6374 "を I<list> に返す。 I<size> 引き数には、 I<list> により参照されるバッファに格"
6375 "納できる要素の最大数を設定すべきである。 呼び出し元プロセスが I<size> 個より"
6376 "多くの補助グループのメンバの場合には、エラーとなる。 この関数を呼び出したプロ"
6377 "セスの実効グループ ID が、 返されるリストに含まれるかどうかは規定されていな"
6378 "い (したがって、アプリケーションは B<getegid>(2) を呼び出し、その結果の値を"
6382 #: build/C/man2/getgroups.2:81
6384 "If I<size> is zero, I<list> is not modified, but the total number of "
6385 "supplementary group IDs for the process is returned. This allows the caller "
6386 "to determine the size of a dynamically allocated I<list> to be used in a "
6387 "further call to B<getgroups>()."
6389 "I<size> が 0 ならば、 I<list> は修正されないが、そのプロセスの補助グループ "
6390 "ID の合計数が返される。 これを使うことで、それ以降の B<getgroups>() の呼び出"
6391 "しで必要となる動的割り当てバッファ I<list> のサイズを、呼び出し元が決定するこ"
6395 #: build/C/man2/getgroups.2:92
6397 "B<setgroups>() sets the supplementary group IDs for the calling process. "
6398 "Appropriate privileges (Linux: the B<CAP_SETGID> capability) are required. "
6399 "The I<size> argument specifies the number of supplementary group IDs in the "
6400 "buffer pointed to by I<list>."
6402 "B<setgroups>() は、呼び出し元プロセスの補助グループ ID を設定する。 適切な特"
6403 "権 (Linux では B<CAP_SETGID> ケーパビリティ (capability)) が必要である。 "
6404 "I<size> 引き数には、 I<list> により参照されるバッファに格納された補助グルー"
6408 #: build/C/man2/getgroups.2:99
6410 "On success, B<getgroups>() returns the number of supplementary group IDs. "
6411 "On error, -1 is returned, and I<errno> is set appropriately."
6413 "B<getgroups>() は、成功すると補助グループ ID の数を返す。 エラーの場合 -1 を"
6414 "返し、 I<errno> を適切に設定する。"
6417 #: build/C/man2/getgroups.2:106
6419 "On success, B<setgroups>() returns 0. On error, -1 is returned, and "
6420 "I<errno> is set appropriately."
6422 "B<setgroups>() は、成功すると 0 を返す。 エラーの場合 -1 を返し、 I<errno> "
6426 #: build/C/man2/getgroups.2:111
6427 msgid "I<list> has an invalid address."
6428 msgstr "I<list> が不正なアドレスである。"
6431 #: build/C/man2/getgroups.2:114
6432 msgid "B<getgroups>() can additionally fail with the following error:"
6433 msgstr "B<getgroups>() は、上記に加えて以下のエラーで失敗する可能性がある。"
6436 #: build/C/man2/getgroups.2:118
6438 "I<size> is less than the number of supplementary group IDs, but is not zero."
6439 msgstr "I<size> が補助グループ ID の数より小さいが 0 でない。"
6442 #: build/C/man2/getgroups.2:121
6443 msgid "B<setgroups>() can additionally fail with the following errors:"
6444 msgstr "B<setgroups>() は、上記に加えて以下のエラーで失敗する可能性がある。"
6447 #: build/C/man2/getgroups.2:127
6449 "I<size> is greater than B<NGROUPS_MAX> (32 before Linux 2.6.4; 65536 since "
6452 "I<size> が B<NGROUPS_MAX> より大きい (B<NGROUPS_MAX> は Linux 2.6.4 より前で"
6453 "は 32、Linux 2.6.4 以降では 65536)。"
6456 #: build/C/man2/getgroups.2:133
6457 msgid "The calling process has insufficient privilege."
6458 msgstr "呼び出し元プロセスが十分な特権を持っていない。"
6461 #: build/C/man2/getgroups.2:141
6463 "SVr4, 4.3BSD. The B<getgroups>() function is in POSIX.1-2001. Since "
6464 "B<setgroups>() requires privilege, it is not covered by POSIX.1-2001."
6466 "SVr4, 4.3BSD. B<getgroups>() 関数は POSIX.1-2001 に準拠している。 "
6467 "B<setgroups>() は特権を必要とするため、POSIX.1-2001 に従っていない。"
6470 #: build/C/man2/getgroups.2:149
6472 "A process can have up to B<NGROUPS_MAX> supplementary group IDs in addition "
6473 "to the effective group ID. The set of supplementary group IDs is inherited "
6474 "from the parent process, and preserved across an B<execve>(2)."
6476 "プロセスは、実効グループ ID に加え、最大 B<NGROUPS_MAX> までの補助グループ "
6477 "ID を持つことができる。 補助グループ ID の集合は親プロセスから継承され、 "
6478 "B<execve>(2) の前後で保持される。"
6481 #: build/C/man2/getgroups.2:152
6483 "The maximum number of supplementary group IDs can be found using B<sysconf>"
6486 "補助グループ ID の最大数は B<sysconf>(3) を使って以下のようにして調べること"
6490 #: build/C/man2/getgroups.2:156
6493 " long ngroups_max;\n"
6494 " ngroups_max = sysconf(_SC_NGROUPS_MAX);\n"
6496 " long ngroups_max;\n"
6497 " ngroups_max = sysconf(_SC_NGROUPS_MAX);\n"
6500 #: build/C/man2/getgroups.2:161
6502 "The maximum return value of B<getgroups>() cannot be larger than one more "
6505 "B<getgroups>() の返り値の最大値は、この値より 1 大きい値より大きくなることは"
6509 #: build/C/man2/getgroups.2:171
6511 "The original Linux B<getgroups>() system call supported only 16-bit group "
6512 "IDs. Subsequently, Linux 2.4 added B<getgroups32>(), supporting 32-bit "
6513 "IDs. The glibc B<getgroups>() wrapper function transparently deals with "
6514 "the variation across kernel versions."
6516 "元々の Linux の B<getgroups>() システムコールは 16 ビットのグループ ID だけ\n"
6517 "に対応していた。その後、Linux 2.4 で、32 ビットの ID に対応した\n"
6518 "B<getgroups>() が追加された。glibc の B<getgroups> のラッパー関数はカーネル\n"
6519 "バージョンによるこの違いを吸収している。"
6522 #: build/C/man2/getgroups.2:178
6524 "B<getgid>(2), B<setgid>(2), B<getgrouplist>(3), B<initgroups>(3), "
6525 "B<capabilities>(7), B<credentials>(7)"
6527 "B<getgid>(2), B<setgid>(2), B<getgrouplist>(3), B<initgroups>(3), "
6528 "B<capabilities>(7), B<credentials>(7)"
6531 #: build/C/man2/getpid.2:23
6537 #: build/C/man2/getpid.2:23
6543 #: build/C/man2/getpid.2:26
6544 msgid "getpid, getppid - get process identification"
6545 msgstr "getpid, getppid - プロセス ID を得る"
6548 #: build/C/man2/getpid.2:32
6549 msgid "B<pid_t getpid(void);>"
6550 msgstr "B<pid_t getpid(void);>"
6553 #: build/C/man2/getpid.2:34
6554 msgid "B<pid_t getppid(void);>"
6555 msgstr "B<pid_t getppid(void);>"
6558 #: build/C/man2/getpid.2:39
6560 "B<getpid>() returns the process ID of the calling process. (This is often "
6561 "used by routines that generate unique temporary filenames.)"
6563 "B<getpid>() は呼び出し元のプロセスのプロセス ID を返す。(テンポラリ用のファ"
6564 "イル名として 他と重ならない名前を生成するルーチンでしばしば使用される。)"
6567 #: build/C/man2/getpid.2:42
6569 "B<getppid>() returns the process ID of the parent of the calling process."
6570 msgstr "B<getppid>() は呼び出し元のプロセスの親プロセスのプロセス ID を返す。"
6573 #: build/C/man2/getpid.2:46
6574 msgid "POSIX.1-2001, 4.3BSD, SVr4."
6575 msgstr "POSIX.1-2001, 4.3BSD, SVr4."
6577 #. The following program demonstrates this "feature":
6578 #. #define _GNU_SOURCE
6579 #. #include <sys/syscall.h>
6580 #. #include <sys/wait.h>
6581 #. #include <stdio.h>
6582 #. #include <stdlib.h>
6583 #. #include <unistd.h>
6585 #. main(int argc, char *argv[])
6587 #. /* The following statement fills the getpid() cache */
6588 #. printf("parent PID = %ld
6589 #. ", (long) getpid());
6590 #. if (syscall(SYS_fork) == 0) {
6591 #. if (getpid() != syscall(SYS_getpid))
6592 #. printf("child getpid() mismatch: getpid()=%ld; "
6593 #. "syscall(SYS_getpid)=%ld
6595 #. (long) getpid(), (long) syscall(SYS_getpid));
6596 #. exit(EXIT_SUCCESS);
6601 #: build/C/man2/getpid.2:98
6603 "Since glibc version 2.3.4, the glibc wrapper function for B<getpid>() "
6604 "caches PIDs, so as to avoid additional system calls when a process calls "
6605 "B<getpid>() repeatedly. Normally this caching is invisible, but its "
6606 "correct operation relies on support in the wrapper functions for B<fork>(2), "
6607 "B<vfork>(2), and B<clone>(2): if an application bypasses the glibc wrappers "
6608 "for these system calls by using B<syscall>(2), then a call to B<getpid>() "
6609 "in the child will return the wrong value (to be precise: it will return the "
6610 "PID of the parent process). See also B<clone>(2) for discussion of a case "
6611 "where B<getpid>() may return the wrong value even when invoking B<clone>"
6612 "(2) via the glibc wrapper function."
6614 "glibc バージョン 2.3.4 以降では、 glibc の B<getpid>() のラッパー関数は PID "
6615 "をキャッシュする。 これは、プロセスが繰り返し B<getpid>() を呼び出した場合に"
6616 "その都度システムコールを呼ぶのを避けるためである。 通常は、このキャッシュ処理"
6617 "が見えることはないが、 キャッシュ処理が正しく働くためには B<fork>(2), "
6618 "B<vfork>(2), B<clone>(2) のラッパー関数でのサポートが必要である。 アプリケー"
6619 "ションがこれらのシステムコールを呼び出す際に、 glibc のラッパー関数を経由せず"
6620 "に B<syscall>(2) を使った場合には、子プロセスで B<getpid>() を呼び出すと間"
6621 "違った値が返ることだろう (正確にいうと、親プロセスの PID が返される)。 "
6622 "B<clone>(2) を glibc のラッパー関数経由で起動した際にも B<getpid>() が間"
6623 "違った値を返す場合があり、これに関する議論は B<clone>(2) も参照してほしい。"
6626 #: build/C/man2/getpid.2:108
6628 "B<clone>(2), B<fork>(2), B<kill>(2), B<exec>(3), B<mkstemp>(3), B<tempnam>"
6629 "(3), B<tmpfile>(3), B<tmpnam>(3), B<credentials>(7)"
6631 "B<clone>(2), B<fork>(2), B<kill>(2), B<exec>(3), B<mkstemp>(3), B<tempnam>"
6632 "(3), B<tmpfile>(3), B<tmpnam>(3), B<credentials>(7)"
6635 #: build/C/man2/getpriority.2:46
6638 msgstr "GETPRIORITY"
6641 #: build/C/man2/getpriority.2:46
6647 #: build/C/man2/getpriority.2:49
6648 msgid "getpriority, setpriority - get/set program scheduling priority"
6650 "getpriority, setpriority - プログラムのスケジューリングの優先度を取得/設定す"
6654 #: build/C/man2/getpriority.2:51 build/C/man2/getrlimit.2:69
6655 #: build/C/man2/getrusage.2:44
6656 msgid "B<#include E<lt>sys/time.hE<gt>>"
6657 msgstr "B<#include E<lt>sys/time.hE<gt>>"
6660 #: build/C/man2/getpriority.2:53 build/C/man2/getrlimit.2:71
6661 #: build/C/man2/getrusage.2:46
6662 msgid "B<#include E<lt>sys/resource.hE<gt>>"
6663 msgstr "B<#include E<lt>sys/resource.hE<gt>>"
6666 #: build/C/man2/getpriority.2:55
6667 msgid "B<int getpriority(int >I<which>B<, int >I<who>B<);>"
6668 msgstr "B<int getpriority(int >I<which>B<, int >I<who>B<);>"
6671 #: build/C/man2/getpriority.2:57
6672 msgid "B<int setpriority(int >I<which>B<, int >I<who>B<, int >I<prio>B<);>"
6673 msgstr "B<int setpriority(int >I<which>B<, int >I<who>B<, int >I<prio>B<);>"
6676 #: build/C/man2/getpriority.2:68
6678 "The scheduling priority of the process, process group, or user, as indicated "
6679 "by I<which> and I<who> is obtained with the B<getpriority>() call and set "
6680 "with the B<setpriority>() call."
6682 "システムコール B<getpriority>() や B<setpriority>() は、 I<which> と "
6683 "I<who> で指定されたプロセス、プロセスグループ、ユーザーの スケジューリング優"
6684 "先度 (scheduling priority) の 取得や設定をそれぞれ行う。"
6687 #: build/C/man2/getpriority.2:95
6689 "The value I<which> is one of B<PRIO_PROCESS>, B<PRIO_PGRP>, or B<PRIO_USER>, "
6690 "and I<who> is interpreted relative to I<which> (a process identifier for "
6691 "B<PRIO_PROCESS>, process group identifier for B<PRIO_PGRP>, and a user ID "
6692 "for B<PRIO_USER>). A zero value for I<who> denotes (respectively) the "
6693 "calling process, the process group of the calling process, or the real user "
6694 "ID of the calling process. I<Prio> is a value in the range -20 to 19 (but "
6695 "see the Notes below). The default priority is 0; lower priorities cause "
6696 "more favorable scheduling."
6698 "I<which> の値は B<PRIO_PROCESS>, B<PRIO_PGRP>, B<PRIO_USER>, のどれか一つ"
6699 "で、 I<who> は I<which> に応じて解釈される (B<PRIO_PROCESS> だとプロセス識別"
6700 "子、 B<PRIO_PGRP> だとプロセスグループ識別子、 B<PRIO_USER> だと UID (ユーザ"
6701 "ID) と解釈される)。 I<who> がゼロならば、(それぞれ)呼び出したプロセス、 呼び"
6702 "出したプロセスのプロセスグループ、 呼び出したプロセスの実UID を意味する。 "
6703 "I<prio> は -20 から 19 の範囲の値で (但し以下の注意の項を参照のこと)、 デフォ"
6704 "ルトの優先度は 0 である; 小さな数字ほど、有利なスケジューリングとなる。"
6707 #: build/C/man2/getpriority.2:105
6709 "The B<getpriority>() call returns the highest priority (lowest numerical "
6710 "value) enjoyed by any of the specified processes. The B<setpriority>() "
6711 "call sets the priorities of all of the specified processes to the specified "
6712 "value. Only the superuser may lower priorities."
6714 "B<getpriority>() コールは指定したプロセスの中の最も高い優先度 (数値的には最"
6715 "小の値) を返す。 B<setpriority>() コールは指定したプロセス全ての優先度を指定"
6716 "した値に設定する。 優先度を今より小さい値に設定できるのはスーパーユーザーだけ"
6720 #: build/C/man2/getpriority.2:118
6722 "Since B<getpriority>() can legitimately return the value -1, it is "
6723 "necessary to clear the external variable I<errno> prior to the call, then "
6724 "check it afterward to determine if -1 is an error or a legitimate value. "
6725 "The B<setpriority>() call returns 0 if there is no error, or -1 if there is."
6727 "B<getpriority>() は成功した場合にも -1 の値を返す可能性があるので、 呼び出し"
6728 "の前に外部変数の I<errno> をクリアし、呼び出しの後に返り値の -1 が正当な値か "
6729 "エラーかを判別する必要がある。 B<setpriority>() コールはエラーがなければ 0 "
6730 "を返し、エラーがあれば -1 を返す。"
6733 #: build/C/man2/getpriority.2:127
6734 msgid "I<which> was not one of B<PRIO_PROCESS>, B<PRIO_PGRP>, or B<PRIO_USER>."
6736 "I<which> が B<PRIO_PROCESS>, B<PRIO_PGRP>, B<PRIO_USER> のいずれでもない。"
6739 #: build/C/man2/getpriority.2:134
6740 msgid "No process was located using the I<which> and I<who> values specified."
6741 msgstr "I<which> と I<who> で指定されたプロセスが存在しない。"
6744 #: build/C/man2/getpriority.2:138
6746 "In addition to the errors indicated above, B<setpriority>() may fail if:"
6747 msgstr "上記のものに加えて B<setpriority>() では以下のエラーがある:"
6750 #: build/C/man2/getpriority.2:150
6752 "The caller attempted to lower a process priority, but did not have the "
6753 "required privilege (on Linux: did not have the B<CAP_SYS_NICE> capability). "
6754 "Since Linux 2.6.12, this error only occurs if the caller attempts to set a "
6755 "process priority outside the range of the B<RLIMIT_NICE> soft resource limit "
6756 "of the target process; see B<getrlimit>(2) for details."
6758 "呼び出し元がプロセスの優先度を下げようとしたが、必要な特権を 持っていなかっ"
6759 "た (Linux の場合、 B<CAP_SYS_NICE> ケーパビリティがなかった)。 Linux 2.6.12 "
6760 "以降では、呼び出し元が、あるプロセスの優先度を、 変更対象のプロセスのリソー"
6761 "ス B<RLIMIT_NICE> のソフトリミットの範囲外に設定しようとした場合にのみ、 この"
6762 "エラーが発生する。詳細は B<getrlimit>(2) を参照。"
6765 #: build/C/man2/getpriority.2:158
6767 "A process was located, but its effective user ID did not match either the "
6768 "effective or the real user ID of the caller, and was not privileged (on "
6769 "Linux: did not have the B<CAP_SYS_NICE> capability). But see NOTES below."
6771 "プロセスは見つかったが、そのプロセスの実効 (effective) UID が 呼び出し元の実"
6772 "効UID にも実 (real) UID にも一致せず、 呼び出し元が特権も持っていなかった "
6773 "(Linux の場合、 B<CAP_SYS_NICE> ケーパビリティがなかった)。 以下の「注意」も"
6777 #: build/C/man2/getpriority.2:161
6779 "SVr4, 4.4BSD (these function calls first appeared in 4.2BSD), POSIX.1-2001."
6780 msgstr "SVr4, 4.4BSD (これらの関数は 4.2BSD で最初に登場した), POSIX.1-2001."
6783 #: build/C/man2/getpriority.2:167
6785 "A child created by B<fork>(2) inherits its parent's nice value. The nice "
6786 "value is preserved across B<execve>(2)."
6788 "B<fork>(2) で作成された子プロセスは、 親プロセスの nice 値を継承する。 "
6789 "B<execve>(2) の前後で nice 値は保存される。"
6792 #: build/C/man2/getpriority.2:178
6794 "The degree to which their relative nice value affects the scheduling of "
6795 "processes varies across UNIX systems, and, on Linux, across kernel "
6796 "versions. Starting with kernel 2.6.23, Linux adopted an algorithm that "
6797 "causes relative differences in nice values to have a much stronger effect. "
6798 "This causes very low nice values (+19) to truly provide little CPU to a "
6799 "process whenever there is any other higher priority load on the system, and "
6800 "makes high nice values (-20) deliver most of the CPU to applications that "
6801 "require it (e.g., some audio applications)."
6803 "相対的な nice 値の違いがプロセス間のスケジューリングにどの程度影響を与えるか "
6804 "は、UNIX システム間で異なり、Linux ではカーネルバージョンにより異なる。 "
6805 "Linux は、カーネル 2.6.23 以降で、nice 値の相対的な違いが、非常に強い影響を "
6806 "与えるアルゴリズムを採用した。このアルゴリズムでは、 他に優先度の高いものがシ"
6807 "ステムに存在する時には、 非常に低い nice 値 (+19) ではプロセスに本当にほとん"
6808 "ど CPU が割り当てられない。 また、高い nice 値 (-20) では CPU を必要とするア"
6809 "プリケーション (例えば オーディオアプリケーション) に CPU のほとんどが割り当"
6813 #: build/C/man2/getpriority.2:193
6815 "The details on the condition for B<EPERM> depend on the system. The above "
6816 "description is what POSIX.1-2001 says, and seems to be followed on all "
6817 "System V-like systems. Linux kernels before 2.6.12 required the real or "
6818 "effective user ID of the caller to match the real user of the process I<who> "
6819 "(instead of its effective user ID). Linux 2.6.12 and later require the "
6820 "effective user ID of the caller to match the real or effective user ID of "
6821 "the process I<who>. All BSD-like systems (SunOS 4.1.3, Ultrix 4.2, 4.3BSD, "
6822 "FreeBSD 4.3, OpenBSD-2.5, ...) behave in the same manner as Linux 2.6.12 and "
6825 "B<EPERM> が発生する条件の詳細はシステムに依存する。 上記の説明は "
6826 "POSIX.1-2001 のものであり、全ての System V 風システムは これに従っているよう"
6827 "である。 2.6.12 より前の Linux カーネルでは、呼び出し元の実 UID または 実効 "
6828 "UID がプロセス I<who> の (実効 UID でなく) 実 UID に一致する必要がある。 "
6829 "Linux 2.6.12 以降では、呼び出し元の実行 UID がプロセス I<who> の実 UID か実"
6830 "効 UID のいずれかと一致する必要がある。 全ての BSD 風システム (SunOS 4.1.3, "
6831 "Ultrix 4.2, 4.3BSD, FreeBSD 4.3, OpenBSD-2.5等) は、 Linux 2.6.12 以降と同じ"
6835 #: build/C/man2/getpriority.2:209
6837 "The actual priority range varies between kernel versions. Linux before "
6838 "1.3.36 had -infinity..15. Since kernel 1.3.43 Linux has the range -20..19. "
6839 "Within the kernel, nice values are actually represented using the "
6840 "corresponding range 40..1 (since negative numbers are error codes) and these "
6841 "are the values employed by the B<setpriority>() and B<getpriority>() "
6842 "system calls. The glibc wrapper functions for these system calls handle the "
6843 "translations between the user-land and kernel representations of the nice "
6844 "value according to the formula I<unice\\ =\\ 20\\ -\\ knice>."
6846 "実際の優先度の値の範囲はカーネルのバージョンによって異なる。 1.3.36 より前の "
6847 "Linux では、優先度の範囲は負の無限大 〜 15 である。 1.3.43 以降の Linux で"
6848 "は、優先度の範囲は -20 〜 19 である。 カーネル内部では、nice 値は実際には 40 "
6849 "〜 1 の範囲を使って 表現されており (負の値はエラーコードとなるため)、こちらの"
6850 "値が システムコール B<setpriority>() と B<getpriority>() で使用されてい"
6851 "る。 glibc のこれらのシステムコールのラッパー関数において、nice 値の ユーザ領"
6852 "域 (user-land) とカーネル表現の間の変換が行われる。 変換式は以下の通り: "
6853 "I<unice\\ =\\ 20\\ -\\ knice>"
6856 #: build/C/man2/getpriority.2:211
6857 msgid "On some systems, the range of nice values is -20..20."
6858 msgstr "いくつかのシステムでは、nice 値の範囲は \\20 〜 20 である。"
6861 #: build/C/man2/getpriority.2:223
6863 "Including I<E<lt>sys/time.hE<gt>> is not required these days, but increases "
6864 "portability. (Indeed, I<E<lt>sys/resource.hE<gt>> defines the I<rusage> "
6865 "structure with fields of type I<struct timeval> defined in I<E<lt>sys/time."
6868 "現在では I<E<lt>sys/time.hE<gt>> をインクルードする必要はないが、インクルード"
6869 "すれば移植性を高めることができる (実際には I<E<lt>sys/resource.hE<gt>> で "
6870 "I<rusage> 構造体が定義されているが、そのフィールドで使用されている I<struct "
6871 "timeval> 型は I<E<lt>sys/time.hE<gt>> で定義されている)。"
6874 #: build/C/man2/getpriority.2:228
6875 msgid "B<nice>(1), B<renice>(1), B<fork>(2), B<capabilities>(7)"
6876 msgstr "B<nice>(1), B<renice>(1), B<fork>(2), B<capabilities>(7)"
6879 #: build/C/man2/getpriority.2:231
6881 "I<Documentation/scheduler/sched-nice-design.txt> in the kernel source tree "
6882 "(since Linux 2.6.23)."
6884 "(Linux 2.6.23 以降の) カーネルのソースツリー内の I<Documentation/scheduler/"
6885 "sched-nice-design.txt>"
6888 #: build/C/man2/getresuid.2:27
6894 #: build/C/man2/getresuid.2:30
6895 msgid "getresuid, getresgid - get real, effective and saved user/group IDs"
6897 "getresuid, getresgid - 実、実効、保存、ユーザー ID / グループ ID を取得する"
6900 #: build/C/man2/getresuid.2:32 build/C/man2/setresuid.2:31
6901 msgid "B<#define _GNU_SOURCE> /* See feature_test_macros(7) */"
6902 msgstr "B<#define _GNU_SOURCE> /* feature_test_macros(7) 参照 */"
6905 #: build/C/man2/getresuid.2:36
6907 "B<int getresuid(uid_t *>I<ruid>B<, uid_t *>I<euid>B<, uid_t *>I<suid>B<);>"
6909 "B<int getresuid(uid_t *>I<ruid>B<, uid_t *>I<euid>B<, uid_t *>I<suid>B<);>"
6912 #: build/C/man2/getresuid.2:38
6914 "B<int getresgid(gid_t *>I<rgid>B<, gid_t *>I<egid>B<, gid_t *>I<sgid>B<);>"
6916 "B<int getresgid(gid_t *>I<rgid>B<, gid_t *>I<egid>B<, gid_t *>I<sgid>B<);>"
6919 #: build/C/man2/getresuid.2:49
6921 "B<getresuid>() returns the real UID, the effective UID, and the saved set-"
6922 "user-ID of the calling process, in the arguments I<ruid>, I<euid>, and "
6923 "I<suid>, respectively. B<getresgid>() performs the analogous task for the "
6924 "process's group IDs."
6926 "B<getresuid>() は、呼び出したプロセスの実 (real) UID、実効 (effective) "
6927 "UID、 保存 (saved) set-user-ID (B<getresgid> の場合はグループ ID) を、 それぞ"
6928 "れ引き数 I<ruid>, I<euid>, I<suid> に格納して返す。 B<getresgid>() は、呼び"
6929 "出したプロセスのグループ ID について同様の処理を行う。"
6932 #: build/C/man2/getresuid.2:59
6934 "One of the arguments specified an address outside the calling program's "
6937 "指定した引き数のどれかが、呼び出したプログラムのアドレス空間の外の アドレスで"
6941 #: build/C/man2/getresuid.2:61
6942 msgid "These system calls appeared on Linux starting with kernel 2.1.44."
6943 msgstr "これらのシステムコールはカーネル 2.1.44 から Linux に登場した。"
6946 #: build/C/man2/getresuid.2:66
6948 "The prototypes are given by glibc since version 2.3.2, provided "
6949 "B<_GNU_SOURCE> is defined."
6951 "プロトタイプ宣言は 2.3.2 以降の glibc では B<_GNU_SOURCE> を定義していると得"
6955 #: build/C/man2/getresuid.2:69 build/C/man2/setresuid.2:86
6957 "These calls are nonstandard; they also appear on HP-UX and some of the BSDs."
6958 msgstr "これらのコールは非標準である。 HP-UX や BSD 系のいくつかにも存在する。"
6961 #: build/C/man2/getresuid.2:85
6963 "The original Linux B<getresuid>() and B<getresgid>() system calls "
6964 "supported only 16-bit user and group IDs. Subsequently, Linux 2.4 added "
6965 "B<getresuid32>() and B<getresgid32>(), supporting 32-bit IDs. The glibc "
6966 "B<getresuid>() and B<getresgid>() wrapper functions transparently deal "
6967 "with the variations across kernel versions."
6969 "元々の Linux の B<getresuid>() と B<getresgid>() システムコールは\n"
6970 "16 ビットのグループ ID だけに対応していた。\n"
6971 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
6972 "B<getresuid32>() と B<getresgid32>() が追加された。\n"
6973 "glibc の B<getresuid>() と B<getresgid>() のラッパー関数は\n"
6974 "カーネルバージョンによるこの違いを吸収している。"
6977 #: build/C/man2/getresuid.2:91
6979 "B<getuid>(2), B<setresuid>(2), B<setreuid>(2), B<setuid>(2), B<credentials>"
6982 "B<getuid>(2), B<setresuid>(2), B<setreuid>(2), B<setuid>(2), B<credentials>"
6986 #: build/C/man2/getrlimit.2:64
6992 #: build/C/man2/getrlimit.2:64
6998 #: build/C/man2/getrlimit.2:67
6999 msgid "getrlimit, setrlimit, prlimit - get/set resource limits"
7000 msgstr "getrlimit, setrlimit, prlimit - 資源の制限を取得/設定する"
7003 #: build/C/man2/getrlimit.2:73
7004 msgid "B<int getrlimit(int >I<resource>B<, struct rlimit *>I<rlim>B<);>"
7005 msgstr "B<int getrlimit(int >I<resource>B<, struct rlimit *>I<rlim>B<);>"
7008 #: build/C/man2/getrlimit.2:75
7009 msgid "B<int setrlimit(int >I<resource>B<, const struct rlimit *>I<rlim>B<);>"
7010 msgstr "B<int setrlimit(int >I<resource>B<, const struct rlimit *>I<rlim>B<);>"
7013 #: build/C/man2/getrlimit.2:78
7015 "B<int prlimit(pid_t >I<pid>B<, int >I<resource>B<, const struct rlimit "
7016 "*>I<new_limit>B<,>"
7018 "B<int prlimit(pid_t >I<pid>B<, int >I<resource>B<, const struct rlimit "
7019 "*>I<new_limit>B<,>"
7022 #: build/C/man2/getrlimit.2:80
7023 msgid "B< struct rlimit *>I<old_limit>B<);>"
7024 msgstr "B< struct rlimit *>I<old_limit>B<);>"
7027 #: build/C/man2/getrlimit.2:88
7028 msgid "B<prlimit>(): _GNU_SOURCE && _FILE_OFFSET_BITS == 64"
7032 #: build/C/man2/getrlimit.2:97
7035 #| "B<getrlimit>() and B<setrlimit>() get and set resource limits "
7036 #| "respectively. Each resource has an associated soft and hard limit, as "
7037 #| "defined by the I<rlimit> structure (the I<rlim> argument to both "
7038 #| "B<getrlimit>() and B<setrlimit>()):"
7040 "The B<getrlimit>() and B<setrlimit>() system calls get and set resource "
7041 "limits respectively. Each resource has an associated soft and hard limit, "
7042 "as defined by the I<rlimit> structure:"
7044 "B<getrlimit>() と B<setrlimit>() はそれぞれ資源 (resource) の制限 (limit) "
7045 "の設定と取得を行う。 各リソースには、それに対応するソフトリミットとハードリ"
7046 "ミットがある。 リミットは (B<getrlimit>() と B<setrlimit>() の I<rlim> 引き"
7047 "数である) I<rlimit> 構造体で定義される:"
7050 #: build/C/man2/getrlimit.2:104
7054 " rlim_t rlim_cur; /* Soft limit */\n"
7055 " rlim_t rlim_max; /* Hard limit (ceiling for rlim_cur) */\n"
7059 " rlim_t rlim_cur; /* ソフトリミット */\n"
7060 " rlim_t rlim_max; /* ハードリミット\n"
7061 " (rlim_cur より小さくない) */\n"
7065 #: build/C/man2/getrlimit.2:115
7067 "The soft limit is the value that the kernel enforces for the corresponding "
7068 "resource. The hard limit acts as a ceiling for the soft limit: an "
7069 "unprivileged process may only set its soft limit to a value in the range "
7070 "from 0 up to the hard limit, and (irreversibly) lower its hard limit. A "
7071 "privileged process (under Linux: one with the B<CAP_SYS_RESOURCE> "
7072 "capability) may make arbitrary changes to either limit value."
7074 "ソフトリミットは、カーネルが対応するリソースに対して課す制限値である。 ハード"
7075 "リミットはソフトリミットの上限として働く。 特権を持たないプロセスは、ソフトリ"
7076 "ミットの値を 0 からハードリミットの範囲に設定することと、 ハードリミットを下"
7077 "げることのみができる (一度下げたハードリミットは上げられない)。 特権プロセス "
7078 "(Linux では B<CAP_SYS_RESOURCE> ケーパビリティ (capability) を持つプロセス) "
7079 "は ソフトリミットとハードリミットを自由に変更できる。"
7082 #: build/C/man2/getrlimit.2:122
7084 "The value B<RLIM_INFINITY> denotes no limit on a resource (both in the "
7085 "structure returned by B<getrlimit>() and in the structure passed to "
7088 "値 B<RLIM_INFINITY> はリソースに制限がないことを表す (この値は B<getrlimit>"
7089 "() が返す構造体と B<setrlimit>() に渡す構造体の両方で使用される)。"
7092 #: build/C/man2/getrlimit.2:126
7093 msgid "The I<resource> argument must be one of:"
7094 msgstr "I<resource> 引き数は次のいずれか 1 つである。"
7097 #: build/C/man2/getrlimit.2:126
7099 msgid "B<RLIMIT_AS>"
7100 msgstr "B<RLIMIT_AS>"
7102 #. since 2.0.27 / 2.1.12
7104 #: build/C/man2/getrlimit.2:146
7106 "The maximum size of the process's virtual memory (address space) in bytes. "
7107 "This limit affects calls to B<brk>(2), B<mmap>(2) and B<mremap>(2), which "
7108 "fail with the error B<ENOMEM> upon exceeding this limit. Also automatic "
7109 "stack expansion will fail (and generate a B<SIGSEGV> that kills the process "
7110 "if no alternate stack has been made available via B<sigaltstack>(2)). Since "
7111 "the value is a I<long>, on machines with a 32-bit I<long> either this limit "
7112 "is at most 2 GiB, or this resource is unlimited."
7114 "プロセスの仮想メモリ (アドレス空間) の最大サイズ (バイト単位)。 この制限は "
7115 "B<brk>(2), B<mmap>(2), B<mremap>(2) の呼び出しに影響し、この制限を超えた場合"
7116 "は エラー B<ENOMEM> で失敗する。 また自動的なスタック拡張にも失敗する (さら"
7117 "に B<sigaltstack>(2) を使った代替スタックを利用可能にしていなかった場合に"
7118 "は、 B<SIGSEGV> を生成してそのプロセスを kill する)。 この値は I<long> 型なの"
7119 "で、32 ビットの I<long> 型を持つマシンでは、 この制限は最大で 2 GiB になる"
7123 #: build/C/man2/getrlimit.2:146
7125 msgid "B<RLIMIT_CORE>"
7126 msgstr "B<RLIMIT_CORE>"
7129 #: build/C/man2/getrlimit.2:153
7131 "Maximum size of I<core> file. When 0 no core dump files are created. When "
7132 "nonzero, larger dumps are truncated to this size."
7134 "I<core> ファイルの最大サイズ。 0 の場合、core ファイルは生成されない。 0 以外"
7135 "の場合、このサイズより大きいダンプは切り詰められる。"
7138 #: build/C/man2/getrlimit.2:153
7140 msgid "B<RLIMIT_CPU>"
7141 msgstr "B<RLIMIT_CPU>"
7144 #: build/C/man2/getrlimit.2:173
7147 #| "CPU time limit in seconds. When the process reaches the soft limit, it "
7148 #| "is sent a B<SIGXCPU> signal. The default action for this signal is to "
7149 #| "terminate the process. However, the signal can be caught, and the "
7150 #| "handler can return control to the main program. If the process continues "
7151 #| "to consume CPU time, it will be sent B<SIGXCPU> once per second until the "
7152 #| "hard limit is reached, at which time it is sent B<SIGKILL>. (This latter "
7153 #| "point describes Linux 2.2 through 2.6 behavior. Implementations vary in "
7154 #| "how they treat processes which continue to consume CPU time after "
7155 #| "reaching the soft limit. Portable applications that need to catch this "
7156 #| "signal should perform an orderly termination upon first receipt of "
7159 "CPU time limit in seconds. When the process reaches the soft limit, it is "
7160 "sent a B<SIGXCPU> signal. The default action for this signal is to "
7161 "terminate the process. However, the signal can be caught, and the handler "
7162 "can return control to the main program. If the process continues to consume "
7163 "CPU time, it will be sent B<SIGXCPU> once per second until the hard limit is "
7164 "reached, at which time it is sent B<SIGKILL>. (This latter point describes "
7165 "Linux behavior. Implementations vary in how they treat processes which "
7166 "continue to consume CPU time after reaching the soft limit. Portable "
7167 "applications that need to catch this signal should perform an orderly "
7168 "termination upon first receipt of B<SIGXCPU>.)"
7170 "CPU 時間の上限 (秒数)。 プロセスがソフトリミットに達した場合に、 B<SIGXCPU> "
7171 "シグナルを送る。 このシグナルに対するデフォルトの動作は、プロセスの終了であ"
7172 "る。 ただしシグナルをキャッチして、ハンドラがメインプログラムに 制御を返すこ"
7173 "ともできる。 プロセスが CPU 時間を使い続けた場合は、 ハードリミットに達するま"
7174 "で 1 秒毎にプロセスに B<SIGXCPU> を送り、 ハードリミットに達すると "
7175 "B<SIGKILL> を送る。 ソフトリミットを超過したときの動作は、 Linux 2.2 から "
7176 "2.6 のものである。 ソフトリミットを超えて CPU 時間を使い続けるプロセスの 扱い"
7177 "方についての実装は変化してきている。 このシグナルをキャッチする必要のある 移"
7178 "植性を考えたアプリケーションでは、 最初に B<SIGXCPU> を受け取った時点で正しく"
7182 #: build/C/man2/getrlimit.2:173
7184 msgid "B<RLIMIT_DATA>"
7185 msgstr "B<RLIMIT_DATA>"
7188 #: build/C/man2/getrlimit.2:184
7190 "The maximum size of the process's data segment (initialized data, "
7191 "uninitialized data, and heap). This limit affects calls to B<brk>(2) and "
7192 "B<sbrk>(2), which fail with the error B<ENOMEM> upon encountering the soft "
7193 "limit of this resource."
7195 "プロセスのデータセグメント (初期化されたデータ・初期化されていないデータ・"
7196 "ヒープ) の最大値。 このリミットは B<brk>(2) と B<sbrk>(2) の呼び出しに影響"
7197 "する。 これらの関数は、このリソースのソフトリミットに達すると、 エラー "
7201 #: build/C/man2/getrlimit.2:184
7203 msgid "B<RLIMIT_FSIZE>"
7204 msgstr "B<RLIMIT_FSIZE>"
7207 #: build/C/man2/getrlimit.2:196
7209 "The maximum size of files that the process may create. Attempts to extend a "
7210 "file beyond this limit result in delivery of a B<SIGXFSZ> signal. By "
7211 "default, this signal terminates a process, but a process can catch this "
7212 "signal instead, in which case the relevant system call (e.g., B<write>(2), "
7213 "B<truncate>(2)) fails with the error B<EFBIG>."
7215 "プロセスが作成できるファイルサイズの最大値。 このサイズを超えてファイルを拡張"
7216 "すると、 B<SIGXFSZ> シグナルを送る。 デフォルトでは、このシグナルはプロセスを"
7217 "終了する。 プロセスをキャッチすることもできるが、 関連するシステムコール "
7218 "(B<write>(2), B<truncate>(2) など) はエラー B<EFBIG> で失敗する。"
7221 #: build/C/man2/getrlimit.2:196
7223 msgid "B<RLIMIT_LOCKS> (Early Linux 2.4 only)"
7224 msgstr "B<RLIMIT_LOCKS> (初期の Linux 2.4 のみ)"
7226 #. to be precise: Linux 2.4.0-test9; no longer in 2.4.25 / 2.5.65
7228 #: build/C/man2/getrlimit.2:204
7230 "A limit on the combined number of B<flock>(2) locks and B<fcntl>(2) leases "
7231 "that this process may establish."
7233 "このプロセスが実行できる B<flock>(2) ロック数と B<fcntl>(2) リース数の合計"
7237 #: build/C/man2/getrlimit.2:204
7239 msgid "B<RLIMIT_MEMLOCK>"
7240 msgstr "B<RLIMIT_MEMLOCK>"
7243 #: build/C/man2/getrlimit.2:242
7245 "The maximum number of bytes of memory that may be locked into RAM. In "
7246 "effect this limit is rounded down to the nearest multiple of the system page "
7247 "size. This limit affects B<mlock>(2) and B<mlockall>(2) and the B<mmap>"
7248 "(2) B<MAP_LOCKED> operation. Since Linux 2.6.9 it also affects the "
7249 "B<shmctl>(2) B<SHM_LOCK> operation, where it sets a maximum on the total "
7250 "bytes in shared memory segments (see B<shmget>(2)) that may be locked by "
7251 "the real user ID of the calling process. The B<shmctl>(2) B<SHM_LOCK> "
7252 "locks are accounted for separately from the per-process memory locks "
7253 "established by B<mlock>(2), B<mlockall>(2), and B<mmap>(2) B<MAP_LOCKED>; a "
7254 "process can lock bytes up to this limit in each of these two categories. In "
7255 "Linux kernels before 2.6.9, this limit controlled the amount of memory that "
7256 "could be locked by a privileged process. Since Linux 2.6.9, no limits are "
7257 "placed on the amount of memory that a privileged process may lock, and this "
7258 "limit instead governs the amount of memory that an unprivileged process may "
7261 "RAM 内にロックできるメモリの最大バイト数。 実際には、この制限はシステムページ"
7262 "サイズの最も近い倍数に 切り捨てて丸められる。 この制限は B<mlock>(2), "
7263 "B<mlockall>(2), B<mmap>(2) の B<MAP_LOCKED> 操作に影響する。 Linux 2.6.9 以"
7264 "降では B<shmctl>(2) B<SHM_LOCK> 操作にも影響する。 この操作は呼び出し元プロ"
7265 "セスの実 (real) ユーザー ID にロックされる 共有メモリセグメント (B<shmget>"
7266 "(2) を参照) の合計バイト数の最大値を設定する。 B<shmctl>(2) B<SHM_LOCK> に"
7267 "よるロックは、 B<mlock>(2), B<mlockall>(2), B<mmap>(2) の B<MAP_LOCKED> に"
7268 "よって確立されるプロセス毎のメモリロックとは分けて数える。 1 つのプロセスはこ"
7269 "の制限までのバイトをロックできる。 この制限には 2 つの種類がある。 2.6.9 より"
7270 "前の Linux カーネル では、 この制限は特権プロセスによってロックされるメモリの"
7271 "合計を制御していた。 Linux 2.6.9 以降では、特権プロセスがロックするメモリの合"
7272 "計に制限はなく、 代わりにこの制限は非特権プロセスがロックするメモリの合計に "
7276 #: build/C/man2/getrlimit.2:242
7278 msgid "B<RLIMIT_MSGQUEUE> (Since Linux 2.6.8)"
7279 msgstr "B<RLIMIT_MSGQUEUE> (Linux 2.6.8 以降)"
7282 #: build/C/man2/getrlimit.2:250
7284 "Specifies the limit on the number of bytes that can be allocated for POSIX "
7285 "message queues for the real user ID of the calling process. This limit is "
7286 "enforced for B<mq_open>(3). Each message queue that the user creates counts "
7287 "(until it is removed) against this limit according to the formula:"
7289 "呼び出し元プロセスの実ユーザー ID に対して、 POSIX メッセージキューのために確"
7290 "保できるバイト数の制限を指定する。 この制限は B<mq_open>(3) に対して適用され"
7291 "る。 ユーザが作成した各々のメッセージキューのバイト数は 以下の式により計算さ"
7292 "れ、(そのキューが削除されるまでの間) この制限の計算対象に含められる。"
7295 #: build/C/man2/getrlimit.2:254
7298 " bytes = attr.mq_maxmsg * sizeof(struct msg_msg *) +\n"
7299 " attr.mq_maxmsg * attr.mq_msgsize\n"
7301 " bytes = attr.mq_maxmsg * sizeof(struct msg_msg *) +\n"
7302 " attr.mq_maxmsg * attr.mq_msgsize\n"
7305 #: build/C/man2/getrlimit.2:262
7307 "where I<attr> is the I<mq_attr> structure specified as the fourth argument "
7310 "ここで I<attr> は I<mq_attr> 構造体であり、 B<mq_open>(3) の第 4 引き数とし"
7314 #: build/C/man2/getrlimit.2:268
7316 "The first addend in the formula, which includes I<sizeof(struct msg_msg *)> "
7317 "(4 bytes on Linux/i386), ensures that the user cannot create an unlimited "
7318 "number of zero-length messages (such messages nevertheless each consume some "
7319 "system memory for bookkeeping overhead)."
7321 "I<sizeof(struct msg_msg *)> (Linux/i386 では 4 バイト) を含む最初の加数は、 "
7322 "ユーザーが長さ 0 のメッセージを無制限に作れないこと保証している (このような"
7323 "メッセージであっても、 記録のためのオーバーヘッドでシステムメモリを消費す"
7327 #: build/C/man2/getrlimit.2:268
7329 msgid "B<RLIMIT_NICE> (since Linux 2.6.12, but see BUGS below)"
7330 msgstr "B<RLIMIT_NICE> (Linux 2.6.12 以降, 下記の「バグ」の節も参照)"
7333 #: build/C/man2/getrlimit.2:281
7335 "Specifies a ceiling to which the process's nice value can be raised using "
7336 "B<setpriority>(2) or B<nice>(2). The actual ceiling for the nice value is "
7337 "calculated as I<20\\ -\\ rlim_cur>. (This strangeness occurs because "
7338 "negative numbers cannot be specified as resource limit values, since they "
7339 "typically have special meanings. For example, B<RLIM_INFINITY> typically is "
7342 "B<setpriority>(2) や B<nice>(2) を使って引き上げられるプロセスの nice 値の"
7343 "上限を指定する。 nice 値の実際の上限は I<20\\ -\\ rlim_cur> で計算される (こ"
7344 "のような変な状況は、リソース制限値として負の数を指定できないため 発生する。通"
7345 "常、負の値は特別な意味を持っているからである。 例えば、通常は "
7346 "B<RLIM_INFINITY> の値は -1 である)。"
7349 #: build/C/man2/getrlimit.2:281
7351 msgid "B<RLIMIT_NOFILE>"
7352 msgstr "B<RLIMIT_NOFILE>"
7355 #: build/C/man2/getrlimit.2:295
7357 "Specifies a value one greater than the maximum file descriptor number that "
7358 "can be opened by this process. Attempts (B<open>(2), B<pipe>(2), B<dup>(2), "
7359 "etc.) to exceed this limit yield the error B<EMFILE>. (Historically, this "
7360 "limit was named B<RLIMIT_OFILE> on BSD.)"
7362 "このプロセスがオープンできるファイルディスクリプタ数の最大値より 1 大きい値を"
7363 "指定する。 (B<open>(2), B<pipe>(2), B<dup>(2) などにより) この上限を超えよう"
7364 "とした場合、エラー B<EMFILE> が発生する (歴史的に、BSD ではこの上限は "
7365 "B<RLIMIT_OFILE> という名前となっている)。"
7368 #: build/C/man2/getrlimit.2:295
7370 msgid "B<RLIMIT_NPROC>"
7371 msgstr "B<RLIMIT_NPROC>"
7374 #: build/C/man2/getrlimit.2:303
7376 "The maximum number of processes (or, more precisely on Linux, threads) that "
7377 "can be created for the real user ID of the calling process. Upon "
7378 "encountering this limit, B<fork>(2) fails with the error B<EAGAIN>."
7380 "呼び出したプロセスの実ユーザー ID で作成できる最大プロセス数 (より正確には "
7381 "Linux ではスレッド数)。 この上限に達すると、 B<fork>(2) はエラー B<EAGAIN> "
7385 #: build/C/man2/getrlimit.2:303
7387 msgid "B<RLIMIT_RSS>"
7388 msgstr "B<RLIMIT_RSS>"
7390 #. As at kernel 2.6.12, this limit still does nothing in 2.6 though
7391 #. talk of making it do something has surfaced from time to time in LKML
7394 #: build/C/man2/getrlimit.2:315
7396 "Specifies the limit (in pages) of the process's resident set (the number of "
7397 "virtual pages resident in RAM). This limit only has effect in Linux 2.4.x, "
7398 "x E<lt> 30, and there only affects calls to B<madvise>(2) specifying "
7401 "プロセスの resident set (RAM 上に存在する仮想ページの数) の 上限を (ページ数"
7402 "で) 指定する。 この制限は 2.4.30 より前でしか影響がなく、 B<madvise>(2) に "
7403 "B<MADV_WILLNEED> を指定した関数コールにしか影響しない。"
7406 #: build/C/man2/getrlimit.2:315
7408 msgid "B<RLIMIT_RTPRIO> (Since Linux 2.6.12, but see BUGS)"
7409 msgstr "B<RLIMIT_RTPRIO> (Linux 2.6.12 以降, バグの節も参照)"
7412 #: build/C/man2/getrlimit.2:322
7414 "Specifies a ceiling on the real-time priority that may be set for this "
7415 "process using B<sched_setscheduler>(2) and B<sched_setparam>(2)."
7417 "B<sched_setscheduler>(2) や B<sched_setparam>(2) を使って設定できる、そのプ"
7418 "ロセスのリアルタイム優先度の上限を指定する。"
7421 #: build/C/man2/getrlimit.2:322
7423 msgid "B<RLIMIT_RTTIME> (Since Linux 2.6.25)"
7424 msgstr "B<RLIMIT_RTTIME> (Linux 2.6.25 以降)"
7427 #: build/C/man2/getrlimit.2:334
7429 "Specifies a limit (in microseconds) on the amount of CPU time that a "
7430 "process scheduled under a real-time scheduling policy may consume without "
7431 "making a blocking system call. For the purpose of this limit, each time a "
7432 "process makes a blocking system call, the count of its consumed CPU time is "
7433 "reset to zero. The CPU time count is not reset if the process continues "
7434 "trying to use the CPU but is preempted, its time slice expires, or it calls "
7435 "B<sched_yield>(2)."
7437 "リアルタイムスケジューリング方針でスケジューリングされるプロセスが ブロッキン"
7438 "グ型のシステムコールを呼び出さずに消費することのできる CPU 時間の合計について"
7439 "の上限を (マイクロ秒単位で) 指定する。 この上限の目的のため、プロセスがブロッ"
7440 "キング型のシステムコールを 呼び出す度に、消費された CPU 時間のカウントは 0 に"
7441 "リセットされる。 プロセスが CPU を使い続けようとしたが他のプロセスに置き換え"
7442 "られた (preempted) 場合や、そのプロセスのタイムスライスが満了した場合、 その"
7443 "プロセスが B<sched_yield>(2) を呼び出した場合は、CPU 時間のカウントはリセッ"
7447 #: build/C/man2/getrlimit.2:345
7449 "Upon reaching the soft limit, the process is sent a B<SIGXCPU> signal. If "
7450 "the process catches or ignores this signal and continues consuming CPU time, "
7451 "then B<SIGXCPU> will be generated once each second until the hard limit is "
7452 "reached, at which point the process is sent a B<SIGKILL> signal."
7454 "ソフトリミットに達すると、そのプロセスに B<SIGXCPU> シグナルが送られる。その"
7455 "プロセスがこのシグナルを捕捉するか 無視して、CPU 時間を消費し続けた場合に"
7456 "は、 ハードリミットに達するまで 1 秒に 1 回 B<SIGXCPU> が生成され続けることに"
7457 "なる。 ハードリミットに達した時点で、そのプロセスには B<SIGKILL> シグナルが送"
7461 #: build/C/man2/getrlimit.2:348
7463 "The intended use of this limit is to stop a runaway real-time process from "
7464 "locking up the system."
7466 "この上限を意図的に使用するのは、暴走したリアルタイムプロセスを 停止して、シス"
7467 "テムが動かなくなるのを避ける場合である。"
7470 #: build/C/man2/getrlimit.2:348
7472 msgid "B<RLIMIT_SIGPENDING> (Since Linux 2.6.8)"
7473 msgstr "B<RLIMIT_SIGPENDING> (Linux 2.6.8 以降)"
7475 #. This replaces the /proc/sys/kernel/rtsig-max system-wide limit
7476 #. that was present in kernels <= 2.6.7. MTK Dec 04
7478 #: build/C/man2/getrlimit.2:362
7481 #| "Specifies the limit on the number of signals that may be queued for the "
7482 #| "real user ID of the calling process. Both standard and real-time signals "
7483 #| "are counted for the purpose of checking this limit. However, the limit "
7484 #| "is only enforced for B<sigqueue>(2); it is always possible to use B<kill>"
7485 #| "(2) to queue one instance of any of the signals that are not already "
7486 #| "queued to the process."
7488 "Specifies the limit on the number of signals that may be queued for the real "
7489 "user ID of the calling process. Both standard and real-time signals are "
7490 "counted for the purpose of checking this limit. However, the limit is only "
7491 "enforced for B<sigqueue>(3); it is always possible to use B<kill>(2) to "
7492 "queue one instance of any of the signals that are not already queued to the "
7495 "呼び出し元プロセスの実ユーザー ID に対して キューに入れられるシグナルの数の制"
7496 "限を指定する。 この制限をチェックするため、 標準シグナルとリアルタイムシグナ"
7497 "ルの両方がカウントされる。 しかし、この制限は B<sigqueue>(2) に対してしか強"
7498 "制されず、 B<kill>(2) 使うことで、そのプロセスに対してまだキューに入れられて"
7499 "いない シグナルのインスタンスをキューに入れることができる。"
7502 #: build/C/man2/getrlimit.2:362
7504 msgid "B<RLIMIT_STACK>"
7505 msgstr "B<RLIMIT_STACK>"
7508 #: build/C/man2/getrlimit.2:370
7510 "The maximum size of the process stack, in bytes. Upon reaching this limit, "
7511 "a B<SIGSEGV> signal is generated. To handle this signal, a process must "
7512 "employ an alternate signal stack (B<sigaltstack>(2))."
7514 "プロセススタックの最大サイズをバイト単位で指定する。 この上限に達すると、 "
7515 "B<SIGSEGV> シグナルが生成される。 このシグナルを扱うためには、 プロセスは代り"
7516 "のシグナルスタック (B<sigaltstack>(2)) を使用しなければならない。"
7519 #: build/C/man2/getrlimit.2:375
7521 "Since Linux 2.6.23, this limit also determines the amount of space used for "
7522 "the process's command-line arguments and environment variables; for details, "
7525 "Linux 2.6.23 以降では、この制限はプロセスのコマンドライン引き数と環境変数 に"
7526 "使用される空間の合計サイズの上限の決定にも使用される。詳細については "
7530 #: build/C/man2/getrlimit.2:375
7535 #. commit c022a0acad534fd5f5d5f17280f6d4d135e74e81
7536 #. Author: Jiri Slaby <jslaby@suse.cz>
7537 #. Date: Tue May 4 18:03:50 2010 +0200
7539 #: build/C/man2/getrlimit.2:386
7541 "The Linux-specific B<prlimit>() system call combines and extends the "
7542 "functionality of B<setrlimit>() and B<getrlimit>(). It can be used to both "
7543 "set and get the resource limits of an arbitrary process."
7547 #: build/C/man2/getrlimit.2:393
7549 "The I<resource> argument has the same meaning as for B<setrlimit>() and "
7554 #: build/C/man2/getrlimit.2:411
7556 "If the I<new_limit> argument is a not NULL, then the I<rlimit> structure to "
7557 "which it points is used to set new values for the soft and hard limits for "
7558 "I<resource>. If the I<old_limit> argument is a not NULL, then a successful "
7559 "call to B<prlimit>() places the previous soft and hard limits for "
7560 "I<resource> in the I<rlimit> structure pointed to by I<old_limit>."
7563 #. FIXME this permission check is strange
7564 #. Asked about this on LKML, 7 Nov 2010
7565 #. "Inconsistent credential checking in prlimit() syscall"
7567 #: build/C/man2/getrlimit.2:430
7569 "The I<pid> argument specifies the ID of the process on which the call is to "
7570 "operate. If I<pid> is 0, then the call applies to the calling process. To "
7571 "set or get the resources of a process other than itself, the caller must "
7572 "have the B<CAP_SYS_RESOURCE> capability, or the real, effective, and saved "
7573 "set user IDs of the target process must match the real user ID of the caller "
7574 "I<and> the real, effective, and saved set group IDs of the target process "
7575 "must match the real group ID of the caller."
7579 #: build/C/man2/getrlimit.2:435
7581 "On success, these system calls return 0. On error, -1 is returned, and "
7582 "I<errno> is set appropriately."
7584 "成功した場合、これらのシステムコールは 0 を返す。\n"
7585 "エラーの場合は -1 が返され、 I<errno> が適切に設定される。"
7588 #: build/C/man2/getrlimit.2:440
7590 #| msgid "I<usage> points outside the accessible address space."
7592 "A pointer argument points to a location outside the accessible address space."
7593 msgstr "I<usage> がアクセス可能なアドレス空間の外を指している。"
7596 #: build/C/man2/getrlimit.2:452
7599 #| "I<resource> is not valid; or, for B<setrlimit>(): I<rlim-E<gt>rlim_cur> "
7600 #| "was greater than I<rlim-E<gt>rlim_max>."
7602 "The value specified in I<resource> is not valid; or, for B<setrlimit>() or "
7603 "B<prlimit>(): I<rlim-E<gt>rlim_cur> was greater than I<rlim-E<gt>rlim_max>."
7605 "I<resource> が有効でない。 または、 B<setrlimit>() で、 I<rlim-"
7606 "E<gt>rlim_cur> が I<rlim-E<gt>rlim_max> よりも大きかった。"
7609 #: build/C/man2/getrlimit.2:464
7612 #| "An unprivileged process tried to use B<setrlimit>() to increase a soft "
7613 #| "or hard limit above the current hard limit; the B<CAP_SYS_RESOURCE> "
7614 #| "capability is required to do this. Or, the process tried to use "
7615 #| "B<setrlimit>() to increase the soft or hard B<RLIMIT_NOFILE> limit above "
7616 #| "the current kernel maximum (B<NR_OPEN>)."
7618 "An unprivileged process tried to raise the hard limit; the "
7619 "B<CAP_SYS_RESOURCE> capability is required to do this. Or, the caller tried "
7620 "to increase the hard B<RLIMIT_NOFILE> limit above the current kernel maximum "
7621 "(B<NR_OPEN>). Or, the calling process did not have permission to set limits "
7622 "for the process specified by I<pid>."
7624 "特権のないプロセスが B<setrlimit>() を使用して ソフトリミットまたはハードリ"
7625 "ミットを 現在のハードリミットより大きくしようと試みた。 これを行うためには "
7626 "B<CAP_SYS_RESOURCE> ケーパビリティが必要である。 または特権のないプロセスが "
7627 "B<setrlimit>() を使用して ソフトまたはハード B<RLIMIT_NOFILE> リミットを現在"
7628 "のカーネルの最大値 (B<NR_OPEN>) 以上に増加させようとした。"
7631 #: build/C/man2/getrlimit.2:468
7632 msgid "Could not find a process with the ID specified in I<pid>."
7636 #: build/C/man2/getrlimit.2:473
7638 "The B<prlimit>() system call is available since Linux 2.6.36. Library "
7639 "support is available since glibc 2.13."
7643 #: build/C/man2/getrlimit.2:477
7644 msgid "B<getrlimit>(), B<setrlimit>(): SVr4, 4.3BSD, POSIX.1-2001."
7648 #: build/C/man2/getrlimit.2:480
7649 msgid "B<prlimit>(): Linux-specific."
7653 #: build/C/man2/getrlimit.2:496
7655 "B<RLIMIT_MEMLOCK> and B<RLIMIT_NPROC> derive from BSD and are not specified "
7656 "in POSIX.1-2001; they are present on the BSDs and Linux, but on few other "
7657 "implementations. B<RLIMIT_RSS> derives from BSD and is not specified in "
7658 "POSIX.1-2001; it is nevertheless present on most implementations. "
7659 "B<RLIMIT_MSGQUEUE>, B<RLIMIT_NICE>, B<RLIMIT_RTPRIO>, B<RLIMIT_RTTIME>, and "
7660 "B<RLIMIT_SIGPENDING> are Linux-specific."
7662 "B<RLIMIT_MEMLOCK> と B<RLIMIT_NPROC> は BSD から派生し、\n"
7663 "POSIX.1-2001 には指定されていない。\n"
7664 "これらは BSD 系と Linux に存在するが、他の実装は少ない。\n"
7665 "B<RLIMIT_RSS> は BSD から派生し、POSIX.1-2001 には指定されていない。\n"
7666 "それにも関わらず多くの実装で存在する。\n"
7667 "B<RLIMIT_MSGQUEUE>, B<RLIMIT_NICE>, B<RLIMIT_RTPRIO>, B<RLIMIT_RTTIME>,\n"
7668 "B<RLIMIT_SIGPENDING> は Linux 固有のものである。"
7671 #: build/C/man2/getrlimit.2:502
7673 "A child process created via B<fork>(2) inherits its parent's resource "
7674 "limits. Resource limits are preserved across B<execve>(2)."
7676 "B<fork>(2) で作成された作成された子プロセスは、 親プロセスのリソース制限を継"
7677 "承する。 B<execve>(2) の前後でリソース制限は保存される。"
7680 #: build/C/man2/getrlimit.2:511
7682 "One can set the resource limits of the shell using the built-in I<ulimit> "
7683 "command (I<limit> in B<csh>(1)). The shell's resource limits are inherited "
7684 "by the processes that it creates to execute commands."
7686 "シェルのリソース制限は、シェルの組み込みコマンドである I<ulimit> (B<csh>(1) "
7687 "では I<limit )> を使って設定することができる。 このシェルのリソース制限は、コ"
7688 "マンドを実行してシェルが生成するプロセス に引き継がれる。"
7691 #: build/C/man2/getrlimit.2:520
7693 "Ancient systems provided a B<vlimit>() function with a similar purpose to "
7694 "B<setrlimit>(). For backward compatibility, glibc also provides B<vlimit>"
7695 "(). All new applications should be written using B<setrlimit>()."
7697 "古いシステムでは、 B<setrlimit>() と同様の目的を持つ関数 B<vlimit>() が提供"
7698 "されていた。 後方互換性のため、glibc でも B<vlimit>() を提供している。 全て"
7699 "の新しいアプリケーションでは、 B<setrlimit>() を使用すべきである。"
7702 #: build/C/man2/getrlimit.2:523
7703 msgid "The program below demonstrates the use of B<prlimit>()."
7707 #: build/C/man2/getrlimit.2:532
7710 "#define _GNU_SOURCE\n"
7711 "#define _FILE_OFFSET_BITS 64\n"
7712 "#include E<lt>stdio.hE<gt>\n"
7713 "#include E<lt>time.hE<gt>\n"
7714 "#include E<lt>stdlib.hE<gt>\n"
7715 "#include E<lt>unistd.hE<gt>\n"
7716 "#include E<lt>sys/resource.hE<gt>\n"
7718 "#define _GNU_SOURCE\n"
7719 "#define _FILE_OFFSET_BITS 64\n"
7720 "#include E<lt>stdio.hE<gt>\n"
7721 "#include E<lt>time.hE<gt>\n"
7722 "#include E<lt>stdlib.hE<gt>\n"
7723 "#include E<lt>unistd.hE<gt>\n"
7724 "#include E<lt>sys/resource.hE<gt>\n"
7727 #: build/C/man2/getrlimit.2:535
7730 "#define errExit(msg) \tdo { perror(msg); exit(EXIT_FAILURE); \\e\n"
7733 "#define errExit(msg) \tdo { perror(msg); exit(EXIT_FAILURE); \\e\n"
7737 #: build/C/man2/getrlimit.2:542
7741 "main(int argc, char *argv[])\n"
7743 " struct rlimit old, new;\n"
7744 " struct rlimit *newp;\n"
7748 "main(int argc, char *argv[])\n"
7750 " struct rlimit old, new;\n"
7751 " struct rlimit *newp;\n"
7755 #: build/C/man2/getrlimit.2:548
7758 " if (!(argc == 2 || argc == 4)) {\n"
7759 " fprintf(stderr, \"Usage: %s E<lt>pidE<gt> [E<lt>new-soft-limitE<gt> \"\n"
7760 " \"E<lt>new-hard-limitE<gt>]\\en\", argv[0]);\n"
7761 " exit(EXIT_FAILURE);\n"
7764 " if (!(argc == 2 || argc == 4)) {\n"
7765 " fprintf(stderr, \"Usage: %s E<lt>pidE<gt> [E<lt>new-soft-limitE<gt> \"\n"
7766 " \"E<lt>new-hard-limitE<gt>]\\en\", argv[0]);\n"
7767 " exit(EXIT_FAILURE);\n"
7771 #: build/C/man2/getrlimit.2:550
7773 msgid " pid = atoi(argv[1]); /* PID of target process */\n"
7774 msgstr " pid = atoi(argv[1]); /* PID of target process */\n"
7777 #: build/C/man2/getrlimit.2:557
7781 " if (argc == 4) {\n"
7782 " new.rlim_cur = atoi(argv[2]);\n"
7783 " new.rlim_max = atoi(argv[3]);\n"
7788 " if (argc == 4) {\n"
7789 " new.rlim_cur = atoi(argv[2]);\n"
7790 " new.rlim_max = atoi(argv[3]);\n"
7795 #: build/C/man2/getrlimit.2:560
7798 " /* Set CPU time limit of target process; retrieve and display\n"
7799 " previous limit */\n"
7801 " /* Set CPU time limit of target process; retrieve and display\n"
7802 " previous limit */\n"
7805 #: build/C/man2/getrlimit.2:565
7808 " if (prlimit(pid, RLIMIT_CPU, newp, &old) == -1)\n"
7809 " errExit(\"prlimit-1\");\n"
7810 " printf(\"Previous limits: soft=%lld; hard=%lld\\en\",\n"
7811 " (long long) old.rlim_cur, (long long) old.rlim_max);\n"
7813 " if (prlimit(pid, RLIMIT_CPU, newp, &old) == -1)\n"
7814 " errExit(\"prlimit-1\");\n"
7815 " printf(\"Previous limits: soft=%lld; hard=%lld\\en\",\n"
7816 " (long long) old.rlim_cur, (long long) old.rlim_max);\n"
7819 #: build/C/man2/getrlimit.2:567
7821 msgid " /* Retrieve and display new CPU time limit */\n"
7822 msgstr " /* Retrieve and display new CPU time limit */\n"
7825 #: build/C/man2/getrlimit.2:572
7828 " if (prlimit(pid, RLIMIT_CPU, NULL, &old) == -1)\n"
7829 " errExit(\"prlimit-2\");\n"
7830 " printf(\"New limits: soft=%lld; hard=%lld\\en\",\n"
7831 " (long long) old.rlim_cur, (long long) old.rlim_max);\n"
7833 " if (prlimit(pid, RLIMIT_CPU, NULL, &old) == -1)\n"
7834 " errExit(\"prlimit-2\");\n"
7835 " printf(\"New limits: soft=%lld; hard=%lld\\en\",\n"
7836 " (long long) old.rlim_cur, (long long) old.rlim_max);\n"
7839 #: build/C/man2/getrlimit.2:575
7842 " exit(EXIT_FAILURE);\n"
7845 " exit(EXIT_FAILURE);\n"
7848 #. FIXME prlimit() does not suffer
7849 #. https://bugzilla.kernel.org/show_bug.cgi?id=5042
7850 #. http://sources.redhat.com/bugzilla/show_bug.cgi?id=12201
7852 #: build/C/man2/getrlimit.2:588
7854 "In older Linux kernels, the B<SIGXCPU> and B<SIGKILL> signals delivered when "
7855 "a process encountered the soft and hard B<RLIMIT_CPU> limits were delivered "
7856 "one (CPU) second later than they should have been. This was fixed in kernel "
7859 "以前の Linux カーネルでは、プロセスがソフトまたはハード B<RLIMIT_CPU> リミッ"
7860 "トに達した場合に送られる B<SIGXCPU> と B<SIGKILL> シグナルが、本来送られるべ"
7861 "き時点の 1 (CPU) 秒後に送られてしまう。 これはカーネル 2.6.8 で修正された。"
7863 #. see http://marc.theaimsgroup.com/?l=linux-kernel&m=114008066530167&w=2
7865 #: build/C/man2/getrlimit.2:596
7867 "In 2.6.x kernels before 2.6.17, a B<RLIMIT_CPU> limit of 0 is wrongly "
7868 "treated as \"no limit\" (like B<RLIM_INFINITY>). Since Linux 2.6.17, "
7869 "setting a limit of 0 does have an effect, but is actually treated as a limit "
7872 "2.6.17 より前の 2.6.x カーネルでは、 B<RLIMIT_CPU> リミットが 0 の場合、 "
7873 "(B<RLIM_INFINITY> と同じように) 「制限なし」と間違って解釈されていた。 Linux "
7874 "2.6.17 以降では、リミットを 0 に設定した場合にも 効果を持つようになっている"
7875 "が、実際にはリミットの値は 1 秒となる。"
7878 #: build/C/man2/getrlimit.2:600
7880 "A kernel bug means that B<RLIMIT_RTPRIO> does not work in kernel 2.6.12; the "
7881 "problem is fixed in kernel 2.6.13."
7883 "カーネル 2.6.12 には、 B<RLIMIT_RTPRIO> が動作しないというバグがある。この問"
7884 "題はカーネル 2.6.13 で修正されている。"
7886 #. see http://marc.theaimsgroup.com/?l=linux-kernel&m=112256338703880&w=2
7888 #: build/C/man2/getrlimit.2:611
7890 "In kernel 2.6.12, there was an off-by-one mismatch between the priority "
7891 "ranges returned by B<getpriority>(2) and B<RLIMIT_NICE>. This had the "
7892 "effect that the actual ceiling for the nice value was calculated as I<19\\ -"
7893 "\\ rlim_cur>. This was fixed in kernel 2.6.13."
7895 "カーネル 2.6.12 では、 B<getpriority>(2) と B<RLIMIT_NICE> が返す優先度の範"
7896 "囲が一つずれていた。このため、nice 値の実際の上限が I<19\\ -\\ rlim_cur> に"
7897 "なってしまうという影響があった。これはカーネル 2.6.13 で修正された。"
7900 #: build/C/man2/getrlimit.2:620
7902 "Kernels before 2.4.22 did not diagnose the error B<EINVAL> for B<setrlimit>"
7903 "() when I<rlim-E<gt>rlim_cur> was greater than I<rlim-E<gt>rlim_max>."
7905 "2.4.22 より前のカーネルでは、 I<rlim-E<gt>rlim_cur> が I<rlim-E<gt>rlim_max> "
7906 "より大きかった場合、 B<setrlimit>() での B<EINVAL> エラーを検出できない。"
7909 #: build/C/man2/getrlimit.2:637
7911 "B<dup>(2), B<fcntl>(2), B<fork>(2), B<getrusage>(2), B<mlock>(2), B<mmap>"
7912 "(2), B<open>(2), B<quotactl>(2), B<sbrk>(2), B<shmctl>(2), B<malloc>(3), "
7913 "B<sigqueue>(3), B<ulimit>(3), B<core>(5), B<capabilities>(7), B<signal>(7)"
7915 "B<dup>(2), B<fcntl>(2), B<fork>(2), B<getrusage>(2), B<mlock>(2), B<mmap>"
7916 "(2), B<open>(2), B<quotactl>(2), B<sbrk>(2), B<shmctl>(2), B<malloc>(3), "
7917 "B<sigqueue>(3), B<ulimit>(3), B<core>(5), B<capabilities>(7), B<signal>(7)"
7920 #: build/C/man2/getrusage.2:39
7926 #: build/C/man2/getrusage.2:39 build/C/man2/getsid.2:25
7927 #: build/C/man2/setpgid.2:46
7933 #: build/C/man2/getrusage.2:42
7934 msgid "getrusage - get resource usage"
7935 msgstr "getrusage - 資源の使用量を取得する"
7938 #: build/C/man2/getrusage.2:48
7939 msgid "B<int getrusage(int >I<who>B<, struct rusage *>I<usage>B<);>"
7940 msgstr "B<int getrusage(int >I<who>B<, struct rusage *>I<usage>B<);>"
7943 #: build/C/man2/getrusage.2:54
7945 "B<getrusage>() returns resource usage measures for I<who>, which can be one "
7948 "B<getrusage>() は I<who> の資源 (resource) の使用量を返す。 I<who> には以下"
7952 #: build/C/man2/getrusage.2:54
7954 msgid "B<RUSAGE_SELF>"
7955 msgstr "B<RUSAGE_SELF>"
7958 #: build/C/man2/getrusage.2:58
7960 "Return resource usage statistics for the calling process, which is the sum "
7961 "of resources used by all threads in the process."
7963 "呼び出したプロセスの資源使用量、 そのプロセス内の全スレッドが使用している資源"
7967 #: build/C/man2/getrusage.2:58
7969 msgid "B<RUSAGE_CHILDREN>"
7970 msgstr "B<RUSAGE_CHILDREN>"
7973 #: build/C/man2/getrusage.2:65
7975 "Return resource usage statistics for all children of the calling process "
7976 "that have terminated and been waited for. These statistics will include the "
7977 "resources used by grandchildren, and further removed descendants, if all of "
7978 "the intervening descendants waited on their terminated children."
7980 "呼び出したプロセスの子プロセスのうち、 終了して待ち状態にある全プロセスが使用"
7981 "している資源使用量の統計を返す。 これらの統計情報には、孫プロセスやその子孫の"
7982 "プロセスのうち、 削除待ちのものが使用している資源も含まれる。"
7985 #: build/C/man2/getrusage.2:65
7987 msgid "B<RUSAGE_THREAD> (since Linux 2.6.26)"
7988 msgstr "B<RUSAGE_THREAD> (Linux 2.6.26 以降)"
7991 #: build/C/man2/getrusage.2:68
7992 msgid "Return resource usage statistics for the calling thread."
7993 msgstr "呼び出したスレッドに関する資源使用量の統計を返す。"
7996 #: build/C/man2/getrusage.2:72
7998 "The resource usages are returned in the structure pointed to by I<usage>, "
7999 "which has the following form:"
8001 "資源使用量は I<usage> が指す構造体に格納されて返される。 構造体は以下の形式で"
8005 #: build/C/man2/getrusage.2:93
8009 " struct timeval ru_utime; /* user CPU time used */\n"
8010 " struct timeval ru_stime; /* system CPU time used */\n"
8011 " long ru_maxrss; /* maximum resident set size */\n"
8012 " long ru_ixrss; /* integral shared memory size */\n"
8013 " long ru_idrss; /* integral unshared data size */\n"
8014 " long ru_isrss; /* integral unshared stack size */\n"
8015 " long ru_minflt; /* page reclaims (soft page faults) */\n"
8016 " long ru_majflt; /* page faults (hard page faults) */\n"
8017 " long ru_nswap; /* swaps */\n"
8018 " long ru_inblock; /* block input operations */\n"
8019 " long ru_oublock; /* block output operations */\n"
8020 " long ru_msgsnd; /* IPC messages sent */\n"
8021 " long ru_msgrcv; /* IPC messages received */\n"
8022 " long ru_nsignals; /* signals received */\n"
8023 " long ru_nvcsw; /* voluntary context switches */\n"
8024 " long ru_nivcsw; /* involuntary context switches */\n"
8028 " struct timeval ru_utime; /* 使用されたユーザー CPU 時間 */\n"
8029 " struct timeval ru_stime; /* 使用されたシステム CPU 時間 */\n"
8030 " long ru_maxrss; /* RAM 上に存在する仮想ページのサイズ\n"
8031 " (resident set size) の最大値 */\n"
8032 " long ru_ixrss; /* 共有メモリの合計サイズ */\n"
8033 " long ru_idrss; /* 非共有データの合計サイズ */\n"
8034 " long ru_isrss; /* 非共有スタックの合計サイズ */\n"
8035 " long ru_minflt; /* ページの再利用 (ソフトページフォルト) */\n"
8036 " long ru_majflt; /* ページフォールト (ハードページフォルト) */\n"
8037 " long ru_nswap; /* スワップ */\n"
8038 " long ru_inblock; /* ブロック入力操作 */\n"
8039 " long ru_oublock; /* ブロック出力操作 */\n"
8040 " long ru_msgsnd; /* 送信された IPC メッセージ */\n"
8041 " long ru_msgrcv; /* 受信された IPC メッセージ */\n"
8042 " long ru_nsignals; /* 受信されたシグナル */\n"
8043 " long ru_nvcsw; /* 意図したコンテキスト切り替え */\n"
8044 " long ru_nivcsw; /* 意図しないコンテキスト切り替え */\n"
8048 #: build/C/man2/getrusage.2:101
8050 "Not all fields are completed; unmaintained fields are set to zero by the "
8051 "kernel. (The unmaintained fields are provided for compatibility with other "
8052 "systems, and because they may one day be supported on Linux.) The fields "
8053 "are interpreted as follows:"
8057 #: build/C/man2/getrusage.2:101
8060 msgstr "I<ru_utime>"
8063 #: build/C/man2/getrusage.2:107
8065 "This is the total amount of time spent executing in user mode, expressed in "
8066 "a I<timeval> structure (seconds plus microseconds)."
8070 #: build/C/man2/getrusage.2:107
8073 msgstr "I<ru_stime>"
8076 #: build/C/man2/getrusage.2:113
8078 "This is the total amount of time spent executing in kernel mode, expressed "
8079 "in a I<timeval> structure (seconds plus microseconds)."
8083 #: build/C/man2/getrusage.2:113
8085 msgid "I<ru_maxrss> (since Linux 2.6.32)"
8086 msgstr "I<ru_maxrss> (Linux 2.6.32 以降)"
8089 #: build/C/man2/getrusage.2:119
8091 "This is the maximum resident set size used (in kilobytes). For "
8092 "B<RUSAGE_CHILDREN>, this is the resident set size of the largest child, not "
8093 "the maximum resident set size of the process tree."
8097 #: build/C/man2/getrusage.2:119
8099 msgid "I<ru_ixrss> (unmaintained)"
8102 #. On some systems, this field records the number of signals received.
8104 #: build/C/man2/getrusage.2:125 build/C/man2/getrusage.2:130
8105 #: build/C/man2/getrusage.2:135 build/C/man2/getrusage.2:147
8106 #: build/C/man2/getrusage.2:159 build/C/man2/getrusage.2:165
8107 #: build/C/man2/getrusage.2:169
8108 msgid "This field is currently unused on Linux."
8112 #: build/C/man2/getrusage.2:125
8114 msgid "I<ru_idrss> (unmaintained)"
8118 #: build/C/man2/getrusage.2:130
8120 msgid "I<ru_isrss> (unmaintained)"
8124 #: build/C/man2/getrusage.2:135
8126 msgid "I<ru_minflt>"
8127 msgstr "I<ru_minflt>"
8130 #: build/C/man2/getrusage.2:140
8132 "The number of page faults serviced without any I/O activity; here I/O "
8133 "activity is avoided by ``reclaiming'' a page frame from the list of pages "
8134 "awaiting reallocation."
8138 #: build/C/man2/getrusage.2:140
8140 msgid "I<ru_majflt>"
8141 msgstr "I<ru_majflt>"
8144 #: build/C/man2/getrusage.2:143
8145 msgid "The number of page faults serviced that required I/O activity."
8149 #: build/C/man2/getrusage.2:143
8151 msgid "I<ru_nswap> (unmaintained)"
8155 #: build/C/man2/getrusage.2:147
8157 msgid "I<ru_inblock> (since Linux 2.6.22)"
8158 msgstr "I<ru_inblock> (Linux 2.6.22 以降)"
8161 #: build/C/man2/getrusage.2:150
8162 msgid "The number of times the file system had to perform input."
8166 #: build/C/man2/getrusage.2:150
8168 msgid "I<ru_oublock> (since Linux 2.6.22)"
8169 msgstr "I<ru_oublock> (Linux 2.6.22 以降)"
8172 #: build/C/man2/getrusage.2:153
8173 msgid "The number of times the file system had to perform output."
8177 #: build/C/man2/getrusage.2:153
8179 msgid "I<ru_msgsnd> (unmaintained)"
8183 #: build/C/man2/getrusage.2:159
8185 msgid "I<ru_msgrcv> (unmaintained)"
8189 #: build/C/man2/getrusage.2:165
8191 msgid "I<ru_nsignals> (unmaintained)"
8195 #: build/C/man2/getrusage.2:169
8197 msgid "I<ru_nvcsw> (since Linux 2.6)"
8198 msgstr "I<ru_nvcsw> (Linux 2.6 以降)"
8201 #: build/C/man2/getrusage.2:174
8203 "The number of times a context switch resulted due to a process voluntarily "
8204 "giving up the processor before its time slice was completed (usually to "
8205 "await availability of a resource)."
8209 #: build/C/man2/getrusage.2:174
8211 msgid "I<ru_nivcsw> (since Linux 2.6)"
8212 msgstr "I<memory_migrate> (Linux 2.6.16 以降)"
8215 #: build/C/man2/getrusage.2:179
8217 "The number of times a context switch resulted due to a higher priority "
8218 "process becoming runnable or because the current process exceeded its time "
8223 #: build/C/man2/getrusage.2:190
8224 msgid "I<usage> points outside the accessible address space."
8225 msgstr "I<usage> がアクセス可能なアドレス空間の外を指している。"
8228 #: build/C/man2/getrusage.2:194
8229 msgid "I<who> is invalid."
8230 msgstr "I<who> が無効である。"
8233 #: build/C/man2/getrusage.2:202
8235 "SVr4, 4.3BSD. POSIX.1-2001 specifies B<getrusage>(), but only specifies the "
8236 "fields I<ru_utime> and I<ru_stime>."
8238 "SVr4, 4.3BSD. POSIX.1-2001 は B<getrusage>() を規定しているが、規定している"
8239 "フィールドは I<ru_utime> と I<ru_stime> だけである。"
8242 #: build/C/man2/getrusage.2:205
8243 msgid "B<RUSAGE_THREAD> is Linux-specific."
8244 msgstr "B<RUSAGE_THREAD> は Linux 固有である。"
8247 #: build/C/man2/getrusage.2:208
8248 msgid "Resource usage metrics are preserved across an B<execve>(2)."
8249 msgstr "B<execve>(2) の前後でリソース使用量の指標は保持される。"
8252 #: build/C/man2/getrusage.2:216
8254 "Including I<E<lt>sys/time.hE<gt>> is not required these days, but increases "
8255 "portability. (Indeed, I<struct timeval> is defined in I<E<lt>sys/time."
8258 "今日では I<E<lt>sys/time.hE<gt>> をインクルードする必要はないが、 インクルー"
8259 "ドしておけば移植性が増す。 (実際 I<struct timeval> は I<E<lt>sys/time."
8260 "hE<gt>> で定義されている。)"
8262 #. See the description of getrusage() in XSH.
8263 #. A similar statement was also in SUSv2.
8265 #: build/C/man2/getrusage.2:228
8267 "In Linux kernel versions before 2.6.9, if the disposition of B<SIGCHLD> is "
8268 "set to B<SIG_IGN> then the resource usages of child processes are "
8269 "automatically included in the value returned by B<RUSAGE_CHILDREN>, although "
8270 "POSIX.1-2001 explicitly prohibits this. This nonconformance is rectified in "
8271 "Linux 2.6.9 and later."
8273 "2.6.9 より前のバージョンの Linux カーネルでは、 B<SIGCHLD> の処理が "
8274 "B<SIG_IGN> に設定されていると、 子プロセスのリソース使用量が "
8275 "B<RUSAGE_CHILDREN> で返される値に自動的に含められる。 しかし POSIX.1-2001 で"
8276 "は、これを明確に禁止している。 この準拠していなかった点は、Linux 2.6.9 以降で"
8280 #: build/C/man2/getrusage.2:231
8282 "The structure definition shown at the start of this page was taken from "
8287 #: build/C/man2/getrusage.2:240
8289 "Ancient systems provided a B<vtimes>() function with a similar purpose to "
8290 "B<getrusage>(). For backward compatibility, glibc also provides B<vtimes>"
8291 "(). All new applications should be written using B<getrusage>()."
8293 "古いシステムでは、 B<getrusage>() と同様の目的を持つ関数 B<vtimes>() が提供\n"
8294 "されていた。後方互換性のため、glibc でも B<vtimes>() を提供している。\n"
8295 "全ての新しいアプリケーションでは B<getrusage>() を使用すべきである。"
8298 #: build/C/man2/getrusage.2:245
8299 msgid "See also the description of I</proc/PID/stat> in B<proc>(5)."
8300 msgstr "B<proc>(5) にある I</proc/PID/stat> の説明も参照のこと。"
8303 #: build/C/man2/getrusage.2:252
8305 "B<clock_gettime>(2), B<getrlimit>(2), B<times>(2), B<wait>(2), B<wait4>(2), "
8308 "B<clock_gettime>(2), B<getrlimit>(2), B<times>(2), B<wait>(2), B<wait4>(2), "
8312 #: build/C/man2/getsid.2:25
8318 #: build/C/man2/getsid.2:28
8319 msgid "getsid - get session ID"
8320 msgstr "getsid - セッション ID を取得する。"
8323 #: build/C/man2/getsid.2:32
8324 msgid "B<pid_t getsid(pid_t>I< pid>B<);>"
8325 msgstr "B<pid_t getsid(pid_t>I< pid>B<);>"
8328 #: build/C/man2/getsid.2:41
8329 msgid "B<getsid>():"
8330 msgstr "B<getsid>():"
8333 #: build/C/man2/getsid.2:44 build/C/man2/setpgid.2:77
8335 "_XOPEN_SOURCE\\ E<gt>=\\ 500 || _XOPEN_SOURCE\\ &&\\ _XOPEN_SOURCE_EXTENDED"
8337 "_XOPEN_SOURCE\\ E<gt>=\\ 500 || _XOPEN_SOURCE\\ &&\\ _XOPEN_SOURCE_EXTENDED"
8340 #: build/C/man2/getsid.2:46 build/C/man2/setpgid.2:79
8341 msgid "|| /* Since glibc 2.12: */ _POSIX_C_SOURCE\\ E<gt>=\\ 200809L"
8342 msgstr "|| /* glibc 2.12 以降: */ _POSIX_C_SOURCE\\ E<gt>=\\ 200809L"
8345 #: build/C/man2/getsid.2:57
8347 "I<getsid(0)> returns the session ID of the calling process. I<getsid(p)> "
8348 "returns the session ID of the process with process ID I<p>. (The session ID "
8349 "of a process is the process group ID of the session leader.)"
8351 "I<getsid(0)> は呼び出し元のプロセスのセッション ID を返す。 I<getsid(p)> はプ"
8352 "ロセス ID I<p> を持つプロセスのセッション ID を返す (プロセスのセッション ID "
8353 "は セッションリーダーのプロセスグループ ID である)。"
8356 #: build/C/man2/getsid.2:62
8358 "On success, a session ID is returned. On error, I<(pid_t)\\ -1> will be "
8359 "returned, and I<errno> is set appropriately."
8361 "成功すると、セッション ID が返される。 エラーの場合、I<(pid_t) -1> が返さ"
8362 "れ、 I<errno> が適切に設定される。"
8365 #: build/C/man2/getsid.2:69
8367 "A process with process ID I<p> exists, but it is not in the same session as "
8368 "the calling process, and the implementation considers this an error."
8370 "プロセス ID I<p> のプロセスは存在するが、呼び出し元のプロセスと同じセッション"
8371 "ではなく、 さらに実装がこの状態をエラーと判断した場合。"
8374 #: build/C/man2/getsid.2:74
8375 msgid "No process with process ID I<p> was found."
8376 msgstr "プロセス ID が I<p> のプロセスがない。"
8378 #. Linux has this system call since Linux 1.3.44.
8379 #. There is libc support since libc 5.2.19.
8381 #: build/C/man2/getsid.2:78
8382 msgid "This system call is available on Linux since version 2.0."
8383 msgstr "このシステムコールは Linux バージョン 2.0 以降で利用可能である。"
8386 #: build/C/man2/getsid.2:80 build/C/man2/setgid.2:76 build/C/man2/setsid.2:66
8387 msgid "SVr4, POSIX.1-2001."
8388 msgstr "SVr4, POSIX.1-2001."
8391 #: build/C/man2/getsid.2:83
8392 msgid "Linux does not return B<EPERM>."
8393 msgstr "Linux は B<EPERM> を返さない。"
8396 #: build/C/man2/getsid.2:87
8397 msgid "B<getpgid>(2), B<setsid>(2), B<credentials>(7)"
8398 msgstr "B<getpgid>(2), B<setsid>(2), B<credentials>(7)"
8401 #: build/C/man2/getuid.2:26
8407 #: build/C/man2/getuid.2:29
8408 msgid "getuid, geteuid - get user identity"
8409 msgstr "getuid, geteuid - ユーザー ID を得る"
8412 #: build/C/man2/getuid.2:35
8413 msgid "B<uid_t getuid(void);>"
8414 msgstr "B<uid_t getuid(void);>"
8417 #: build/C/man2/getuid.2:37
8418 msgid "B<uid_t geteuid(void);>"
8419 msgstr "B<uid_t geteuid(void);>"
8422 #: build/C/man2/getuid.2:40
8423 msgid "B<getuid>() returns the real user ID of the calling process."
8424 msgstr "B<getuid>() は呼び出し元のプロセスの実ユーザー ID を返す。"
8427 #: build/C/man2/getuid.2:43
8428 msgid "B<geteuid>() returns the effective user ID of the calling process."
8429 msgstr "B<geteuid>() は呼び出し元のプロセスの実効ユーザー ID を返す。"
8432 #: build/C/man2/getuid.2:48
8438 #: build/C/man2/getuid.2:57
8440 "In UNIX V6 the B<getuid>() call returned I<(euid E<lt>E<lt> 8) + uid>. "
8441 "UNIX V7 introduced separate calls B<getuid>() and B<geteuid>()."
8443 "UNIX V6 では B<getuid>() コールは I<(euid E<lt>E<lt> 8) + uid> を返してい"
8444 "た。 UNIX V7 では B<getuid>() と B<geteuid>() という別々のコールが導入され"
8448 #: build/C/man2/getuid.2:73
8450 "The original Linux B<getuid>() and B<geteuid>() system calls supported "
8451 "only 16-bit user IDs. Subsequently, Linux 2.4 added B<getuid32>() and "
8452 "B<geteuid32>(), supporting 32-bit IDs. The glibc B<getuid>() and B<geteuid>"
8453 "() wrapper functions transparently deal with the variations across kernel "
8456 "元々の Linux の B<getuid>() と B<geteuid>() システムコールは\n"
8457 "16 ビットのグループ ID だけに対応していた。\n"
8458 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
8459 "B<getuid32>() と B<geteuid32>() が追加された。\n"
8460 "glibc の B<getuid>() と B<geteuid>() のラッパー関数は\n"
8461 "カーネルバージョンによるこの違いを吸収している。"
8464 #: build/C/man2/getuid.2:78
8465 msgid "B<getresuid>(2), B<setreuid>(2), B<setuid>(2), B<credentials>(7)"
8466 msgstr "B<getresuid>(2), B<setreuid>(2), B<setuid>(2), B<credentials>(7)"
8469 #: build/C/man2/iopl.2:33
8475 #: build/C/man2/iopl.2:33
8481 #: build/C/man2/iopl.2:36
8482 msgid "iopl - change I/O privilege level"
8483 msgstr "iopl - I/O 特権レベルを変更する"
8486 #: build/C/man2/iopl.2:38
8487 msgid "B<#include E<lt>sys/io.hE<gt>>"
8488 msgstr "B<#include E<lt>sys/io.hE<gt>>"
8491 #: build/C/man2/iopl.2:40
8492 msgid "B<int iopl(int >I<level>B<);>"
8493 msgstr "B<int iopl(int >I<level>B<);>"
8496 #: build/C/man2/iopl.2:44
8498 "B<iopl>() changes the I/O privilege level of the calling process, as "
8499 "specified in I<level>."
8501 "B<iopl>() は呼び出し元のプロセスの I/O 特権レベルを I<level> で指定した値に"
8505 #: build/C/man2/iopl.2:50
8507 "This call is necessary to allow 8514-compatible X servers to run under "
8508 "Linux. Since these X servers require access to all 65536 I/O ports, the "
8509 "B<ioperm>(2) call is not sufficient."
8511 "この関数は 8514 互換の X サーバを Linux で動作させるために必要である。 なぜな"
8512 "らこの X サーバは 65536 個の I/O ポート全てへのアクセスを要求するので "
8513 "B<ioperm>(2) 関数では不十分だからである。"
8516 #: build/C/man2/iopl.2:54
8518 "In addition to granting unrestricted I/O port access, running at a higher I/"
8519 "O privilege level also allows the process to disable interrupts. This will "
8520 "probably crash the system, and is not recommended."
8522 "より高い I/O 特権レベルでの動作をさせることによって I/O ポートアクセスの制限"
8523 "を解除することに加えて、プロセスが割り込みを 無効にすることもできるようにな"
8524 "る。この機能は時としてシステムの破壊を もたらすので勧められない。"
8527 #: build/C/man2/iopl.2:59
8528 msgid "Permissions are inherited by B<fork>(2) and B<execve>(2)."
8529 msgstr "B<fork>(2) や B<exec>(2) を行った場合、特権は継承される。"
8532 #: build/C/man2/iopl.2:61
8533 msgid "The I/O privilege level for a normal process is 0."
8534 msgstr "通常のプロセスの I/O 特権レベルは 0 である。"
8537 #: build/C/man2/iopl.2:65
8539 "This call is mostly for the i386 architecture. On many other architectures "
8540 "it does not exist or will always return an error."
8542 "このシステムコールはほとんど i386 アーキテクチャのためだけのものである。 その"
8543 "他の多くのアーキテクチャでは存在しないか、常にエラーを返す。"
8546 #: build/C/man2/iopl.2:75
8547 msgid "I<level> is greater than 3."
8548 msgstr "引き数 I<level> が 3 より大きい。"
8551 #: build/C/man2/iopl.2:78
8552 msgid "This call is unimplemented."
8553 msgstr "このシステムコールは実装されていない。"
8556 #: build/C/man2/iopl.2:85
8558 "The calling process has insufficient privilege to call B<iopl>(); the "
8559 "B<CAP_SYS_RAWIO> capability is required."
8561 "呼び出し元プロセスに B<iopl>() を呼び出すのに十分な権限がなかった。 B<iopl>"
8562 "() を呼び出すには B<CAP_SYS_RAWIO> ケーパビリティが必要である。"
8565 #: build/C/man2/iopl.2:89
8567 "B<iopl>() is Linux-specific and should not be used in processes intended to "
8570 "B<iopl>() は Linux 特有の関数であり、移植を意図したプログラムで 使用してはな"
8574 #: build/C/man2/iopl.2:98
8576 "Libc5 treats it as a system call and has a prototype in I<E<lt>unistd."
8577 "hE<gt>>. Glibc1 does not have a prototype. Glibc2 has a prototype both in "
8578 "I<E<lt>sys/io.hE<gt>> and in I<E<lt>sys/perm.hE<gt>>. Avoid the latter, it "
8579 "is available on i386 only."
8581 "libc5 ではシステムコールとして扱い I<E<lt>unistd.hE<gt>> にプロトタイプが存在"
8582 "している。 glibc1 にはプロトタイプは存在していない。 glibc2 は I<E<lt>sys/io."
8583 "hE<gt>> と I<E<lt>sys/perm.hE<gt>> の両方にプロトタイプを持っている。 後者は "
8584 "i386 のみで利用可能なので、使用すべきではない。"
8587 #: build/C/man2/iopl.2:101
8588 msgid "B<ioperm>(2), B<capabilities>(7)"
8589 msgstr "B<ioperm>(2), B<capabilities>(7)"
8592 #: build/C/man2/ioprio_set.2:25
8598 #: build/C/man2/ioprio_set.2:25
8604 #: build/C/man2/ioprio_set.2:28
8605 msgid "ioprio_get, ioprio_set - get/set I/O scheduling class and priority"
8606 msgstr "ioprio_get, ioprio_set - I/O スケジューリングクラスと優先度の設定/取得"
8609 #: build/C/man2/ioprio_set.2:32
8612 "B<int ioprio_get(int >I<which>B<, int >I<who>B<);>\n"
8613 "B<int ioprio_set(int >I<which>B<, int >I<who>B<, int >I<ioprio>B<);>\n"
8615 "B<int ioprio_get(int >I<which>B<, int >I<who>B<);>\n"
8616 "B<int ioprio_set(int >I<which>B<, int >I<who>B<, int >I<ioprio>B<);>\n"
8619 #: build/C/man2/ioprio_set.2:40
8621 "The B<ioprio_get>() and B<ioprio_set>() system calls respectively get and "
8622 "set the I/O scheduling class and priority of one or more processes."
8624 "システムコール B<ioprio_get>() / B<ioprio_set>() は、(1つ以上の) プロセス"
8625 "の I/O スケジューリングクラスと 優先度の取得/設定を行う。"
8628 #: build/C/man2/ioprio_set.2:52
8630 "The I<which> and I<who> arguments identify the process(es) on which the "
8631 "system calls operate. The I<which> argument determines how I<who> is "
8632 "interpreted, and has one of the following values:"
8634 "I<which> と I<who> 引き数でシステムコールの操作対象となるプロセスを指示す"
8635 "る。 I<which> 引き数は、 I<who> をどのように解釈するかを決めるもので、以下の"
8639 #: build/C/man2/ioprio_set.2:52
8641 msgid "B<IOPRIO_WHO_PROCESS>"
8642 msgstr "B<IOPRIO_WHO_PROCESS>"
8645 #: build/C/man2/ioprio_set.2:56
8646 msgid "I<who> is a process ID identifying a single process."
8647 msgstr "I<who> はプロセスID であり、指定された 1 プロセスが対象となる。"
8650 #: build/C/man2/ioprio_set.2:56
8652 msgid "B<IOPRIO_WHO_PGRP>"
8653 msgstr "B<IOPRIO_WHO_PGRP>"
8656 #: build/C/man2/ioprio_set.2:60
8658 "I<who> is a process group ID identifying all the members of a process group."
8660 "I<who> はプロセスグループID であり、プロセスグループの全メンバが対象となる。"
8663 #: build/C/man2/ioprio_set.2:60
8665 msgid "B<IOPRIO_WHO_USER>"
8666 msgstr "B<IOPRIO_WHO_USER>"
8669 #: build/C/man2/ioprio_set.2:65
8671 "I<who> is a user ID identifying all of the processes that have a matching "
8673 msgstr "I<who> はユーザID であり、実 UID に一致する全プロセスが対象となる。"
8676 #: build/C/man2/ioprio_set.2:88
8678 "If I<which> is specified as B<IOPRIO_WHO_PGRP> or B<IOPRIO_WHO_USER> when "
8679 "calling B<ioprio_get>(), and more than one process matches I<who>, then the "
8680 "returned priority will be the highest one found among all of the matching "
8681 "processes. One priority is said to be higher than another one if it belongs "
8682 "to a higher priority class (B<IOPRIO_CLASS_RT> is the highest priority "
8683 "class; B<IOPRIO_CLASS_IDLE> is the lowest) or if it belongs to the same "
8684 "priority class as the other process but has a higher priority level (a lower "
8685 "priority number means a higher priority level)."
8687 "B<ioprio_get>() の呼び出し時に I<which> に B<IOPRIO_WHO_PGRP> か "
8688 "B<IOPRIO_WHO_USER> が指定され、 I<who> に一致するプロセスが複数あった場合、 "
8689 "一致するプロセス全体の中で最も高い優先度が返される。 優先度が高いとは、より高"
8690 "い優先度クラスに属している (B<IOPRIO_CLASS_RT> が最も高い優先度クラスで、 "
8691 "B<IOPRIO_CLASS_IDLE> が最も低い)、もしくは 同じ優先度クラスに属しているが優先"
8692 "度レベルが高い (優先度番号が小さい方が優先度レベルが高いことを意味する)、 と"
8696 #: build/C/man2/ioprio_set.2:98
8698 "The I<ioprio> argument given to B<ioprio_set>() is a bit mask that "
8699 "specifies both the scheduling class and the priority to be assigned to the "
8700 "target process(es). The following macros are used for assembling and "
8701 "dissecting I<ioprio> values:"
8703 "B<ioprio_set>() に渡す I<ioprio> 引き数は、対象となるプロセスに割り当てるス"
8704 "ケジューリングクラスと 優先度の両方を指定するビットマスクである。 I<ioprio> "
8705 "の値を組み立てたり解釈するのに、以下のマクロが利用できる。"
8708 #: build/C/man2/ioprio_set.2:98
8710 msgid "B<IOPRIO_PRIO_VALUE(>I<class>B<, >I<data>B<)>"
8711 msgstr "B<IOPRIO_PRIO_VALUE(>I<class>B<, >I<data>B<)>"
8714 #: build/C/man2/ioprio_set.2:107
8716 "Given a scheduling I<class> and priority (I<data>), this macro combines the "
8717 "two values to produce an I<ioprio> value, which is returned as the result of "
8720 "スケジューリングクラス I<class> と優先度 (I<data>) を与えると、このマクロは "
8721 "2つの値を組み合わせて、 I<ioprio> 値を生成し、マクロの結果として返す。"
8724 #: build/C/man2/ioprio_set.2:107
8726 msgid "B<IOPRIO_PRIO_CLASS(>I<mask>B<)>"
8727 msgstr "B<IOPRIO_PRIO_CLASS(>I<mask>B<)>"
8730 #: build/C/man2/ioprio_set.2:119
8732 "Given I<mask> (an I<ioprio> value), this macro returns its I/O class "
8733 "component, that is, one of the values B<IOPRIO_CLASS_RT>, "
8734 "B<IOPRIO_CLASS_BE>, or B<IOPRIO_CLASS_IDLE>."
8736 "I<mask> (I<ioprio> 値) を与えると、このマクロは I/O クラス要素、つまり "
8737 "B<IOPRIO_CLASS_RT>, B<IOPRIO_CLASS_BE>, B<IOPRIO_CLASS_IDLE> のいずれか一つの"
8741 #: build/C/man2/ioprio_set.2:119
8743 msgid "B<IOPRIO_PRIO_DATA(>I<mask>B<)>"
8744 msgstr "B<IOPRIO_PRIO_DATA(>I<mask>B<)>"
8747 #: build/C/man2/ioprio_set.2:128
8749 "Given I<mask> (an I<ioprio> value), this macro returns its priority "
8750 "(I<data>) component."
8752 "I<mask> (I<ioprio> 値) を与えると、このマクロは優先度 (I<data>) 要素を返す。"
8755 #: build/C/man2/ioprio_set.2:131
8757 "See the NOTES section for more information on scheduling classes and "
8760 "スケジューリングクラスと優先度に関する詳しい情報は、 「備考」の節を参照のこ"
8764 #: build/C/man2/ioprio_set.2:139
8766 "I/O priorities are supported for reads and for synchronous (B<O_DIRECT>, "
8767 "B<O_SYNC>) writes. I/O priorities are not supported for asynchronous "
8768 "writes because they are issued outside the context of the program dirtying "
8769 "the memory, and thus program-specific priorities do not apply."
8771 "I/O 優先度は読み出しと同期書き込み (B<O_DIRECT>, B<O_SYNC>) に対応してい"
8772 "る。 I/O 優先度は非同期書き込みには対応していない。なぜなら、 非同期書き込み"
8773 "はメモリ書き換えを行うプログラムの動作 (context) とは 関係なく発行され、その"
8774 "ためプログラム単位の優先度は適用されないから である。"
8777 #: build/C/man2/ioprio_set.2:152
8779 "On success, B<ioprio_get>() returns the I<ioprio> value of the process with "
8780 "highest I/O priority of any of the processes that match the criteria "
8781 "specified in I<which> and I<who>. On error, -1 is returned, and I<errno> is "
8782 "set to indicate the error."
8784 "成功すると、 B<ioprio_get>() は、 I<which> と I<who> で指定された基準に合致"
8785 "した全プロセスで最も高い I/O 優先度を持つプロセスの I<ioprio> 値を返す。 エ"
8786 "ラーの場合、-1 を返し、 I<errno> にエラーを示す値を設定する。"
8789 #: build/C/man2/ioprio_set.2:159
8791 "On success, B<ioprio_set>() returns 0. On error, -1 is returned, and "
8792 "I<errno> is set to indicate the error."
8794 "成功すると、 B<ioprio_set>() は 0 を返す。 エラーの場合、-1 を返し、 "
8795 "I<errno> にエラーを示す値を設定する。"
8798 #: build/C/man2/ioprio_set.2:169
8800 "Invalid value for I<which> or I<ioprio>. Refer to the NOTES section for "
8801 "available scheduler classes and priority levels for I<ioprio>."
8803 "I<which> か I<ioprio> の値が不正である。 I<ioprio> 用に指定可能なスケジューラ"
8804 "クラスと優先度レベルについては 「備考」を参照のこと。"
8807 #: build/C/man2/ioprio_set.2:177
8809 "The calling process does not have the privilege needed to assign this "
8810 "I<ioprio> to the specified process(es). See the NOTES section for more "
8811 "information on required privileges for B<ioprio_set>()."
8813 "呼び出し元プロセスが、指定されたプロセスに I<ioprio> を割り当てるのに必要な権"
8814 "限を持っていない。 B<ioprio_set>() に必要な権限についての詳しい情報は「備"
8818 #: build/C/man2/ioprio_set.2:183
8820 "No process(es) could be found that matched the specification in I<which> and "
8823 "I<which> と I<who> で指定された基準に合致するプロセスが見つからなかった。"
8826 #: build/C/man2/ioprio_set.2:186
8827 msgid "These system calls have been available on Linux since kernel 2.6.13."
8829 "これらのシステムコールはカーネル 2.6.13 以降の Linux で利用可能である。"
8832 #: build/C/man2/ioprio_set.2:191
8834 "Glibc does not provide wrapper for these system calls; call them using "
8837 "glibc はこれらのシステムコールに対するラッパー関数を提供していない。 "
8838 "B<syscall>(2) を使って呼び出すこと。"
8841 #: build/C/man2/ioprio_set.2:196
8843 "These system calls only have an effect when used in conjunction with an I/O "
8844 "scheduler that supports I/O priorities. As at kernel 2.6.17 the only such "
8845 "scheduler is the Completely Fair Queuing (CFQ) I/O scheduler."
8847 "これらのシステムコールは、I/O 優先度に対応した I/O スケジューラと 組み合わせ"
8848 "て使用された場合にのみ効果を持つ。 カーネル 2.6.17 では、この条件を満たすスケ"
8849 "ジューラは Completely Fair Queuing (CFQ) I/O スケジューラだけである。"
8852 #: build/C/man2/ioprio_set.2:196
8854 msgid "Selecting an I/O Scheduler"
8855 msgstr "I/O スケジューラの選択"
8858 #: build/C/man2/ioprio_set.2:200
8860 "I/O Schedulers are selected on a per-device basis via the special file I</"
8861 "sys/block/E<lt>deviceE<gt>/queue/scheduler>."
8863 "I/O スケジューラの選択はデバイス単位に行われ、その選択は スペシャルファイル "
8864 "I</sys/block/E<lt>deviceE<gt>/queue/scheduler> 経由で行われる。"
8867 #: build/C/man2/ioprio_set.2:206
8869 "One can view the current I/O scheduler via the I</sys> file system. For "
8870 "example, the following command displays a list of all schedulers currently "
8871 "loaded in the kernel:"
8873 "現在の I/O スケジューラは I</sys> ファイルシステム経由で参照できる。例えば、"
8874 "以下のコマンドを実行すると、 現在カーネルでロードされているスケジューラの全リ"
8878 #: build/C/man2/ioprio_set.2:211
8881 "$B< cat /sys/block/hda/queue/scheduler>\n"
8882 "noop anticipatory deadline [cfq]\n"
8884 "$B< cat /sys/block/hda/queue/scheduler>\n"
8885 "noop anticipatory deadline [cfq]\n"
8888 #: build/C/man2/ioprio_set.2:225
8890 "The scheduler surrounded by brackets is the one actually in use for the "
8891 "device (I<hda> in the example). Setting another scheduler is done by "
8892 "writing the name of the new scheduler to this file. For example, the "
8893 "following command will set the scheduler for the I<hda> device to I<cfq>:"
8895 "括弧で囲まれたスケジューラがそのデバイス (上の例では I<hda>) について実際に"
8896 "使用されているスケジューラである。 別のスケジューラを設定するには、このファイ"
8897 "ルに新しいスケジューラ名を 書き込めばよい。例えば、以下のコマンドを実行する"
8898 "と、デバイス I<hda> のスケジューラとして I<cfq> が設定される。"
8901 #: build/C/man2/ioprio_set.2:231
8906 "#B< echo cfq E<gt> /sys/block/hda/queue/scheduler>\n"
8910 "#B< echo cfq E<gt> /sys/block/hda/queue/scheduler>\n"
8913 #: build/C/man2/ioprio_set.2:233
8915 msgid "The Completely Fair Queuing (CFQ) I/O Scheduler"
8916 msgstr "Completely Fair Queuing (CFQ) I/O スケジューラ"
8919 #: build/C/man2/ioprio_set.2:239
8921 "Since v3 (aka CFQ Time Sliced) CFQ implements I/O nice levels similar to "
8922 "those of CPU scheduling. These nice levels are grouped in three scheduling "
8923 "classes each one containing one or more priority levels:"
8925 "バージョン 3 (別名 CFQ Time Sliced) 以降、 CPU スケジューリングと同様の I/O "
8926 "nice レベルが CFQ に実装されている。 これらの nice レベルは 3つのスケジューリ"
8927 "ングクラスに分類でき、 各スケジューリングクラスにつき 1つ以上の優先度レベルが"
8931 #: build/C/man2/ioprio_set.2:239
8933 msgid "B<IOPRIO_CLASS_RT> (1)"
8934 msgstr "B<IOPRIO_CLASS_RT> (1)"
8937 #: build/C/man2/ioprio_set.2:254
8939 "This is the real-time I/O class. This scheduling class is given higher "
8940 "priority than any other class: processes from this class are given first "
8941 "access to the disk every time. Thus this I/O class needs to be used with "
8942 "some care: one I/O real-time process can starve the entire system. Within "
8943 "the real-time class, there are 8 levels of class data (priority) that "
8944 "determine exactly how much time this process needs the disk for on each "
8945 "service. The highest real-time priority level is 0; the lowest is 7. In "
8946 "the future this might change to be more directly mappable to performance, by "
8947 "passing in a desired data rate instead."
8949 "これはリアルタイム I/O クラスである。 このスケジューリングクラスには他のクラ"
8950 "スよりも高い優先度が与えられる。 このクラスのプロセスには、常にディスクへのア"
8951 "クセスが優先して 割り当てられる。そのため、この I/O クラスを使う際には、 たっ"
8952 "た一つの リアルタイム I/O クラスのプロセスにより システム全体のディスクアクセ"
8953 "スができなくなってしまうことがある という点に、注意を払う必要がある。 このク"
8954 "ラスには、8 段階の class data (優先度レベル) がある。 この値は、そのプロセス"
8955 "が 1回のディスクアクセスにどれだけの 時間が必要かを正確に決めるためのものであ"
8956 "る。 最高のリアルタイム優先度レベルは 0 で、最低は 7 である。 将来的には、優"
8957 "先度レベルは、希望するデータレートを渡すなど、 より直接的に性能条件を反映でき"
8961 #: build/C/man2/ioprio_set.2:254
8963 msgid "B<IOPRIO_CLASS_BE> (2)"
8964 msgstr "B<IOPRIO_CLASS_BE> (2)"
8967 #: build/C/man2/ioprio_set.2:267
8969 "This is the best-effort scheduling class, which is the default for any "
8970 "process that hasn't set a specific I/O priority. The class data (priority) "
8971 "determines how much I/O bandwidth the process will get. Best-effort "
8972 "priority levels are analogous to CPU nice values (see B<getpriority>(2)). "
8973 "The priority level determines a priority relative to other processes in the "
8974 "best-effort scheduling class. Priority levels range from 0 (highest) to 7 "
8977 "これは ベストエフォート・スケジューリングクラスである。 このクラスは、特定の "
8978 "I/O 優先度を設定していないプロセスの デフォルト値である。 class data (優先度"
8979 "レベル) により、そのプロセスがどの程度の I/O 帯域を得られるかが決定される。 "
8980 "ベストエフォート・優先度レベルは、CPU の nice 値 (B<getpriority>(2) 参照) と"
8981 "同様のものである。 優先度レベルは、ベストエフォート・スケジューリングクラスの"
8982 "中で 他のプロセスとの相対的な優先度を決定する。 優先度レベルの値の範囲は 0 "
8983 "(最高) から 7 (最低) である。"
8986 #: build/C/man2/ioprio_set.2:267
8988 msgid "B<IOPRIO_CLASS_IDLE> (3)"
8989 msgstr "B<IOPRIO_CLASS_IDLE> (3)"
8992 #: build/C/man2/ioprio_set.2:276
8994 "This is the idle scheduling class. Processes running at this level only get "
8995 "I/O time when no-one else needs the disk. The idle class has no class "
8996 "data. Attention is required when assigning this priority class to a "
8997 "process, since it may become starved if higher priority processes are "
8998 "constantly accessing the disk."
9000 "これは idle スケジューリングクラスである。 このレベルで動作するプロセスは他に"
9001 "ディスクアクセスをしようとする プロセスがない場合にのみ I/O 時間を取得する。 "
9002 "idle クラスには class data (優先度) は用意されていない。 プロセスにこの優先度"
9003 "を割り当てる際には注意が必要である。 なぜなら、優先度の高いプロセスが常にディ"
9004 "スクにアクセスしている場合には ディスクにアクセスできなくなる可能性があるから"
9008 #: build/C/man2/ioprio_set.2:280
9010 "Refer to I<Documentation/block/ioprio.txt> for more information on the CFQ I/"
9011 "O Scheduler and an example program."
9013 "CFQ I/O スケジューラの更なる情報とサンプルプログラムについては "
9014 "I<Documentation/block/ioprio.txt> を参照のこと。"
9017 #: build/C/man2/ioprio_set.2:280
9019 msgid "Required permissions to set I/O priorities"
9020 msgstr "I/O 優先度の設定に必要な許可"
9023 #: build/C/man2/ioprio_set.2:283
9025 "Permission to change a process's priority is granted or denied based on two "
9028 "プロセスの優先度を変更する許可が得られるかどうかは 以下の 2つの条件に基いて決"
9032 #: build/C/man2/ioprio_set.2:283
9034 msgid "B<Process ownership>"
9035 msgstr "B<プロセスの所有権>"
9038 #: build/C/man2/ioprio_set.2:291
9040 "An unprivileged process may only set the I/O priority of a process whose "
9041 "real UID matches the real or effective UID of the calling process. A "
9042 "process which has the B<CAP_SYS_NICE> capability can change the priority of "
9045 "非特権プロセスは、プロセスの実 UID が呼び出し元プロセスの実 UID もしくは 実"
9046 "効 UID と一致するプロセスの I/O 優先度のみを設定できる。 B<CAP_SYS_NICE> ケー"
9047 "パビリティを持つプロセスは、どのプロセスの優先度でも変更できる。"
9050 #: build/C/man2/ioprio_set.2:291
9052 msgid "B<What is the desired priority>"
9053 msgstr "B<どの優先度に設定しようとしているか>"
9056 #: build/C/man2/ioprio_set.2:303
9058 "Attempts to set very high priorities (B<IOPRIO_CLASS_RT>) require the "
9059 "B<CAP_SYS_ADMIN> capability. Kernel versions up to 2.6.24 also required "
9060 "B<CAP_SYS_ADMIN> to set a very low priority (B<IOPRIO_CLASS_IDLE>), but "
9061 "since Linux 2.6.25, this is no longer required."
9063 "非常に高い優先度 (B<IOPRIO_CLASS_RT>) を設定しようとする場合、 "
9064 "B<CAP_SYS_ADMIN> ケーパビリティが必要である。 カーネル 2.6.24 以前では、非常"
9065 "に低い優先度 (B<IOPRIO_CLASS_IDLE>) を設定するためにも B<CAP_SYS_ADMIN> ケー"
9066 "パビリティが必要であったが、 Linux 2.6.25 以降ではもはや必要なくなった。"
9069 #: build/C/man2/ioprio_set.2:308
9071 "A call to B<ioprio_set>() must follow both rules, or the call will fail "
9072 "with the error B<EPERM>."
9074 "B<ioprio_set>() はこの両方のルールに従い、条件を満たさない場合、エラー "
9077 #. 6 May 07: Bug report raised:
9078 #. http://sources.redhat.com/bugzilla/show_bug.cgi?id=4464
9079 #. Ulrich Drepper replied that he wasn't going to add these
9082 #: build/C/man2/ioprio_set.2:317
9084 "Glibc does not yet provide a suitable header file defining the function "
9085 "prototypes and macros described on this page. Suitable definitions can be "
9086 "found in I<linux/ioprio.h>."
9088 "glibc は、このページに記載された関数プロトタイプやマクロを定義する 適切なヘッ"
9089 "ダファイルをまだ提供していない。 必要な定義については I<linux/ioprio.h> を見"
9093 #: build/C/man2/ioprio_set.2:321
9094 msgid "B<getpriority>(2), B<open>(2), B<capabilities>(7)"
9095 msgstr "B<getpriority>(2), B<open>(2), B<capabilities>(7)"
9098 #: build/C/man2/ioprio_set.2:323
9099 msgid "Documentation/block/ioprio.txt in the kernel source tree."
9100 msgstr "カーネルソース内の Documentation/block/ioprio.txt"
9103 #: build/C/man2/ipc.2:26
9109 #: build/C/man2/ipc.2:26
9115 #: build/C/man2/ipc.2:29
9116 msgid "ipc - System V IPC system calls"
9117 msgstr "ipc - System V IPC システムコール"
9120 #: build/C/man2/ipc.2:34
9123 "B<int ipc(unsigned int >I<call>B<, int >I<first>B<, int >I<second>B<, int >I<third>B<,>\n"
9124 "B< void *>I<ptr>B<, long >I<fifth>B<);>\n"
9126 "B<int ipc(unsigned int >I<call>B<, int >I<first>B<, int >I<second>B<, int >I<third>B<,>\n"
9127 "B< void *>I<ptr>B<, long >I<fifth>B<);>\n"
9130 #: build/C/man2/ipc.2:42
9132 "B<ipc>() is a common kernel entry point for the System V IPC calls for "
9133 "messages, semaphores, and shared memory. I<call> determines which IPC "
9134 "function to invoke; the other arguments are passed through to the "
9137 "B<ipc>() は メッセージ、セマフォー、共有メモリに関する System V IPC コール"
9138 "の 共通のカーネルへのエントリポイントである。 I<call> はどの IPC 関数を呼び出"
9139 "すかを決め; 他の引き数は適切なコールへと渡される。"
9142 #: build/C/man2/ipc.2:46
9144 "User programs should call the appropriate functions by their usual names. "
9145 "Only standard library implementors and kernel hackers need to know about "
9148 "ユーザープログラムは通常の名前で適切な関数を呼び出すべきである。 標準ライブラ"
9149 "リの実装者やカーネルハッカーのみが B<ipc>() について知る必要がある。"
9152 #: build/C/man2/ipc.2:50
9154 "B<ipc>() is Linux-specific, and should not be used in programs intended to "
9157 "B<ipc>() は Linux 特有であり、 移植を意図したプログラムでは 使用してはいけな"
9161 #: build/C/man2/ipc.2:58
9163 "On a few architectures, for example ia64, there is no B<ipc>() system call; "
9164 "instead B<msgctl>(2), B<semctl>(2), B<shmctl>(2), and so on really are "
9165 "implemented as separate system calls."
9167 "ia64 などのいくつかのアーキテクチャでは、システムコール B<ipc>() が存在しな"
9168 "い。実際には、その代わりに B<msgctl>(2), B<semctl>(2), B<shmctl>(2) などが独"
9169 "立したシステムコールとして実装されている。"
9172 #: build/C/man2/ipc.2:71
9174 "B<msgctl>(2), B<msgget>(2), B<msgrcv>(2), B<msgsnd>(2), B<semctl>(2), "
9175 "B<semget>(2), B<semop>(2), B<semtimedop>(2), B<shmat>(2), B<shmctl>(2), "
9176 "B<shmdt>(2), B<shmget>(2)"
9178 "B<msgctl>(2), B<msgget>(2), B<msgrcv>(2), B<msgsnd>(2), B<semctl>(2), "
9179 "B<semget>(2), B<semop>(2), B<shmat>(2), B<shmctl>(2), B<shmdt>(2), B<shmget>"
9183 #: build/C/man2/seteuid.2:27
9189 #: build/C/man2/seteuid.2:27
9195 #: build/C/man2/seteuid.2:30
9196 msgid "seteuid, setegid - set effective user or group ID"
9197 msgstr "seteuid, setegid - 実効ユーザー ID や 実効グループ ID を設定する"
9200 #: build/C/man2/seteuid.2:36
9201 msgid "B<int seteuid(uid_t >I<euid>B<);>"
9202 msgstr "B<int seteuid(uid_t >I<euid>B<);>"
9205 #: build/C/man2/seteuid.2:38
9206 msgid "B<int setegid(gid_t >I<egid>B<);>"
9207 msgstr "B<int setegid(gid_t >I<egid>B<);>"
9210 #: build/C/man2/seteuid.2:47
9211 msgid "B<seteuid>(), B<setegid>():"
9212 msgstr "B<seteuid>(), B<setegid>():"
9215 #: build/C/man2/seteuid.2:49
9217 "_BSD_SOURCE || _POSIX_C_SOURCE\\ E<gt>=\\ 200112L || _XOPEN_SOURCE\\ E<gt>="
9220 "_BSD_SOURCE || _POSIX_C_SOURCE\\ E<gt>=\\ 200112L || _XOPEN_SOURCE\\ E<gt>="
9224 #: build/C/man2/seteuid.2:56
9226 "B<seteuid>() sets the effective user ID of the calling process. "
9227 "Unprivileged user processes may only set the effective user ID to the real "
9228 "user ID, the effective user ID or the saved set-user-ID."
9230 "B<seteuid>() は呼び出し元のプロセスの実効ユーザー ID を設定する。 非特権ユー"
9231 "ザーのプロセスの場合、実効ユーザー ID に設定できるのは、 実ユーザー ID・実効"
9232 "ユーザー ID・保存 set-user-ID のいずれかだけである。"
9236 #. equals \-1, nothing is changed.
9237 #. (This is an artifact of the implementation in glibc of seteuid()
9238 #. using setresuid(2).)
9240 #: build/C/man2/seteuid.2:65
9242 "Precisely the same holds for B<setegid>() with \"group\" instead of \"user"
9245 "B<setegid>() は「ユーザー」ではなく「グループ」に対して全く同じことを行う。"
9248 #: build/C/man2/seteuid.2:89
9250 "The calling process is not privileged (Linux: does not have the "
9251 "B<CAP_SETUID> capability in the case of B<seteuid>(), or the B<CAP_SETGID> "
9252 "capability in the case of B<setegid>()) and I<euid> (respectively, "
9253 "I<egid>) is not the real user (group) ID, the effective user (group) ID, or "
9254 "the saved set-user-ID (saved set-group-ID)."
9256 "呼び出し元のプロセスに特権がなく、 I<euid> (I<egid>) が実ユーザー (グルー"
9257 "プ) ID、または実効ユーザー (グループ) ID、 保存 set-user-ID (保存 set-group-"
9258 "ID) のいずれでもではない (Linux においては、 B<seteuid>() では "
9259 "B<CAP_SETUID> ケーパビリティ (capability) が、 B<setegid>() では "
9260 "B<CAP_SETGID> ケーパビリティがない場合に、特権がないと判断される)。"
9263 #: build/C/man2/seteuid.2:91
9264 msgid "4.3BSD, POSIX.1-2001."
9265 msgstr "4.3BSD, POSIX.1-2001."
9268 #: build/C/man2/seteuid.2:97
9270 "Setting the effective user (group) ID to the saved set-user-ID (saved set-"
9271 "group-ID) is possible since Linux 1.1.37 (1.1.38). On an arbitrary system "
9272 "one should check B<_POSIX_SAVED_IDS>."
9274 "実効ユーザー (グループ) ID を保存 set-user-ID (保存 set-group-ID) に 設定でき"
9275 "るのは、Linux 1.1.37 (1.1.38) 以降である。 全てのシステムにおいて "
9276 "B<_POSIX_SAVED_IDS> をチェックすべきである。"
9279 #: build/C/man2/seteuid.2:108
9281 "Under libc4, libc5 and glibc 2.0 B<seteuid(>I<euid>B<)> is equivalent to "
9282 "B<setreuid(-1,>I< euid>B<)> and hence may change the saved set-user-ID. "
9283 "Under glibc 2.1 and later it is equivalent to B<setresuid(-1,>I< euid>B<, -1)"
9284 "> and hence does not change the saved set-user-ID. Similar remarks hold for "
9287 "libc4, libc5, glibc 2.0 では、 B<seteuid(>I<euid>B<)> は B<setreuid(-1,>I< "
9288 "euid>B<)> と等価であり、保存 set-user-ID を変更するかもしれない。 glibc 2.1 "
9289 "では、 B<setresuid(-1,>I< euid>B<, -1)> と等価であり、保存 set-user-ID 変更し"
9290 "ない。 同様のことが B<setegid>() にも言える。"
9293 #: build/C/man2/seteuid.2:117
9295 "According to POSIX.1, B<seteuid>() (B<setegid>()) need not permit I<euid> "
9296 "(I<egid>) to be the same value as the current effective user (group) ID, "
9297 "and some implementations do not permit this."
9299 "POSIX.1 では、 B<seteuid>() (B<setegid>()) で、 I<euid> (I<egid>) として現"
9300 "在の実効ユーザ (グループ) ID と同じ値を指定可能である 必要はないとされてお"
9301 "り、いくつかの実装では I<euid> (I<egid>) として現在の実効ユーザ (グループ) "
9302 "ID と同じ値を 指定することができない。"
9305 #: build/C/man2/seteuid.2:124
9307 "B<geteuid>(2), B<setresuid>(2), B<setreuid>(2), B<setuid>(2), B<capabilities>"
9308 "(7), B<credentials>(7)"
9310 "B<geteuid>(2), B<setresuid>(2), B<setreuid>(2), B<setuid>(2), B<capabilities>"
9311 "(7), B<credentials>(7)"
9314 #: build/C/man2/setfsgid.2:29
9320 #: build/C/man2/setfsgid.2:32
9321 msgid "setfsgid - set group identity used for file system checks"
9323 "setfsgid - ファイルシステムのチェックに用いられるグループ ID を設定する"
9326 #: build/C/man2/setfsgid.2:35 build/C/man2/setfsuid.2:35
9327 msgid "B<#include E<lt>unistd.hE<gt>> /* glibc uses E<lt>sys/fsuid.hE<gt> */"
9328 msgstr "B<#include E<lt>unistd.hE<gt>> /* glibc では E<lt>sys/fsuid.hE<gt> */"
9331 #: build/C/man2/setfsgid.2:37
9332 msgid "B<int setfsgid(uid_t >I<fsgid>B<);>"
9333 msgstr "B<int setfsgid(uid_t >I<fsgid>B<);>"
9336 #: build/C/man2/setfsgid.2:49
9338 "The system call B<setfsgid>() sets the group ID that the Linux kernel uses "
9339 "to check for all accesses to the file system. Normally, the value of "
9340 "I<fsgid> will shadow the value of the effective group ID. In fact, whenever "
9341 "the effective group ID is changed, I<fsgid> will also be changed to the new "
9342 "value of the effective group ID."
9344 "システムコール B<setfsgid>() は Linux カーネルがファイルシステムに対する 全"
9345 "てのアクセスのチェックに使用するグループ IDを設定する。通常は I<fsgid> の値は"
9346 "実効 (effective) グループID と同じになる。実際、 実効グループ ID が変更される"
9347 "度に I<fsgid> もまた新しい実効グループID の値に変更される。"
9350 #: build/C/man2/setfsgid.2:60
9352 "Explicit calls to B<setfsuid>(2) and B<setfsgid>() are usually only used "
9353 "by programs such as the Linux NFS server that need to change what user and "
9354 "group ID is used for file access without a corresponding change in the real "
9355 "and effective user and group IDs. A change in the normal user IDs for a "
9356 "program such as the NFS server is a security hole that can expose it to "
9357 "unwanted signals. (But see below.)"
9359 "通常、 B<setfsuid>() や B<setfsgid>() が明示的に呼び出されるのは、Linux "
9360 "NFS サーバー のように、 ファイルアクセスに用いるユーザID / グループID を変更"
9361 "しなければならないが、 対応する実(real)/実効(effective) ユーザID / グループ"
9362 "ID は変更したくないような プログラムに限られる。 NFS サーバーのようなプログラ"
9363 "ムで、通常のユーザID を変更すると、 プロセスを望まないシグナルにさらす可能性"
9364 "があり、 セキュリティホールになる。(下記参照)"
9367 #: build/C/man2/setfsgid.2:67
9369 "B<setfsgid>() will only succeed if the caller is the superuser or if "
9370 "I<fsgid> matches either the real group ID, effective group ID, saved set-"
9371 "group-ID, or the current value of I<fsgid>."
9373 "B<setfsgid>() は、スーパーユーザによって呼び出された場合か、 I<fsgid> が実グ"
9374 "ループID、実効グループID、 保存セットグループID (saved set-group-ID)、現在の "
9375 "I<fsgid> の値のいずれかに一致する場合にのみ成功する。"
9378 #: build/C/man2/setfsgid.2:74
9380 "On success, the previous value of I<fsgid> is returned. On error, the "
9381 "current value of I<fsgid> is returned."
9383 "成功した場合、 I<fsgid> の以前の値を返す。エラーの場合は I<fsgid> の現在の値"
9386 #. This system call is present since Linux 1.1.44
9387 #. and in libc since libc 4.7.6.
9389 #: build/C/man2/setfsgid.2:78 build/C/man2/setfsuid.2:78
9390 msgid "This system call is present in Linux since version 1.2."
9391 msgstr "このシステムコールはバージョン 1.2 以降の Linux に存在する。"
9394 #: build/C/man2/setfsgid.2:82
9396 "B<setfsgid>() is Linux-specific and should not be used in programs intended "
9399 "B<setfsgid>() は Linux 特有であり、移植を想定したプログラムで使用してはいけ"
9403 #: build/C/man2/setfsgid.2:88
9405 "When glibc determines that the argument is not a valid group ID, it will "
9406 "return -1 and set I<errno> to B<EINVAL> without attempting the system call."
9408 "glibc が引き数がグループID として不正だと判断した場合は、 システムコールを行"
9409 "わず I<errno> に B<EINVAL> を設定して -1 が返される。"
9412 #: build/C/man2/setfsgid.2:92 build/C/man2/setfsuid.2:92
9414 "Note that at the time this system call was introduced, a process could send "
9415 "a signal to a process with the same effective user ID. Today signal "
9416 "permission handling is slightly different."
9418 "このシステムコールが導入された当時、プロセスは 同じ実効ユーザIDのプロセスへシ"
9419 "グナルを送ることができた。 今日では、シグナル送信権限の扱いはかなり違うものに"
9423 #: build/C/man2/setfsgid.2:102
9425 "The original Linux B<setfsgid>() system call supported only 16-bit group "
9426 "IDs. Subsequently, Linux 2.4 added B<setfsgid32>() supporting 32-bit IDs. "
9427 "The glibc B<setfsgid>() wrapper function transparently deals with the "
9428 "variation across kernel versions."
9430 "元々の Linux の B<setfsgid>() システムコールは\n"
9431 "16 ビットのグループ ID だけに対応していた。\n"
9432 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
9433 "B<setfsgid32>() が追加された。\n"
9434 "glibc の B<setfsgid>() のラッパー関数は\n"
9435 "カーネルバージョンによるこの違いを吸収している。"
9438 #: build/C/man2/setfsgid.2:110
9440 "No error messages of any kind are returned to the caller. At the very "
9441 "least, B<EPERM> should be returned when the call fails (because the caller "
9442 "lacks the B<CAP_SETGID> capability)."
9444 "いかなる種類のエラーメッセージも返さない。 失敗した場合は (呼び出し元には "
9445 "B<CAP_SETGID> ケーパビリティがなかったのだから) 最低でも B<EPERM> くらいは返"
9449 #: build/C/man2/setfsgid.2:115
9450 msgid "B<kill>(2), B<setfsuid>(2), B<capabilities>(7), B<credentials>(7)"
9451 msgstr "B<kill>(2), B<setfsuid>(2), B<capabilities>(7), B<credentials>(7)"
9454 #: build/C/man2/setfsuid.2:29
9460 #: build/C/man2/setfsuid.2:32
9461 msgid "setfsuid - set user identity used for file system checks"
9462 msgstr "setfsuid - ファイルシステムのチェックに用いられるユーザ ID を設定する"
9465 #: build/C/man2/setfsuid.2:37
9466 msgid "B<int setfsuid(uid_t >I<fsuid>B<);>"
9467 msgstr "B<int setfsuid(uid_t >I<fsuid>B<);>"
9470 #: build/C/man2/setfsuid.2:49
9472 "The system call B<setfsuid>() sets the user ID that the Linux kernel uses "
9473 "to check for all accesses to the file system. Normally, the value of "
9474 "I<fsuid> will shadow the value of the effective user ID. In fact, whenever "
9475 "the effective user ID is changed, I<fsuid> will also be changed to the new "
9476 "value of the effective user ID."
9478 "B<setfsuid>() は Linux カーネルがファイルシステムに対する 全てのアクセスの"
9479 "チェックに使用するユーザID を設定する。通常は I<fsuid> の値は実効 "
9480 "(effective) ユーザID と同じになる。実際、 実効ユーザID が変更される度に "
9481 "I<fsuid> もまた新しい実効ユーザID の値に変更される。"
9484 #: build/C/man2/setfsuid.2:60
9486 "Explicit calls to B<setfsuid>() and B<setfsgid>(2) are usually only used "
9487 "by programs such as the Linux NFS server that need to change what user and "
9488 "group ID is used for file access without a corresponding change in the real "
9489 "and effective user and group IDs. A change in the normal user IDs for a "
9490 "program such as the NFS server is a security hole that can expose it to "
9491 "unwanted signals. (But see below.)"
9493 "通常、 B<setfsuid>() や B<setfsgid>() が明示的に呼び出されるのは、Linux "
9494 "NFS サーバー のように、 ファイルアクセスに用いるユーザID / グループID を変更"
9495 "しなければならないが、 対応する実(real)/実効(effective) ユーザID / グループ"
9496 "ID は変更したくないような プログラムに限られる。 NFS サーバーのようなプログラ"
9497 "ムで、通常のユーザID を変更すると、 プロセスを望まないシグナルにさらす可能性"
9498 "があり、 セキュリティホールになる。(下記参照)"
9501 #: build/C/man2/setfsuid.2:67
9503 "B<setfsuid>() will only succeed if the caller is the superuser or if "
9504 "I<fsuid> matches either the real user ID, effective user ID, saved set-user-"
9505 "ID, or the current value of I<fsuid>."
9507 "B<setfsuid>() は、スーパーユーザによって呼び出された場合か、 I<fsuid> が実"
9508 "ユーザID、実効ユーザID、 保存セットユーザID (saved set-user-ID)、現在の "
9509 "I<fsuid> の値のいずれかに一致する場合にのみ成功する。"
9512 #: build/C/man2/setfsuid.2:74
9514 "On success, the previous value of I<fsuid> is returned. On error, the "
9515 "current value of I<fsuid> is returned."
9517 "成功した場合、 I<fsuid> の以前の値を返す。エラーの場合は I<fsuid> の現在の値"
9521 #: build/C/man2/setfsuid.2:82
9523 "B<setfsuid>() is Linux-specific and should not be used in programs intended "
9526 "B<setfsuid>() は Linux 特有であり、移植を想定したプログラムで使用してはいけ"
9530 #: build/C/man2/setfsuid.2:88
9532 "When glibc determines that the argument is not a valid user ID, it will "
9533 "return -1 and set I<errno> to B<EINVAL> without attempting the system call."
9535 "glibc が引き数がユーザID として不正だと判断した場合は、 システムコールを行わ"
9536 "ず I<errno> に B<EINVAL> を設定して -1 が返される。"
9539 #: build/C/man2/setfsuid.2:102
9541 "The original Linux B<setfsuid>() system call supported only 16-bit user "
9542 "IDs. Subsequently, Linux 2.4 added B<setfsuid32>() supporting 32-bit IDs. "
9543 "The glibc B<setfsuid>() wrapper function transparently deals with the "
9544 "variation across kernel versions."
9546 "元々の Linux の B<setfsuid>() システムコールは\n"
9547 "16 ビットのグループ ID だけに対応していた。\n"
9548 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
9549 "B<setfsuid32>() が追加された。\n"
9550 "glibc の B<setfsuid>() のラッパー関数は\n"
9551 "カーネルバージョンによるこの違いを吸収している。"
9554 #: build/C/man2/setfsuid.2:110
9556 "No error messages of any kind are returned to the caller. At the very "
9557 "least, B<EPERM> should be returned when the call fails (because the caller "
9558 "lacks the B<CAP_SETUID> capability)."
9560 "いかなる種類のエラーメッセージも呼び出し元に返さない。 失敗した場合は (呼び出"
9561 "し元には B<CAP_SETUID> ケーパビリティがなかったのだから) 最低でも B<EPERM> く"
9565 #: build/C/man2/setfsuid.2:115
9566 msgid "B<kill>(2), B<setfsgid>(2), B<capabilities>(7), B<credentials>(7)"
9567 msgstr "B<kill>(2), B<setfsgid>(2), B<capabilities>(7), B<credentials>(7)"
9570 #: build/C/man2/setgid.2:27
9576 #: build/C/man2/setgid.2:30
9577 msgid "setgid - set group identity"
9578 msgstr "setgid - グループ識別(identity)を設定する"
9581 #: build/C/man2/setgid.2:36
9582 msgid "B<int setgid(gid_t >I<gid>B<);>"
9583 msgstr "B<int setgid(gid_t >I<gid>B<);>"
9586 #: build/C/man2/setgid.2:41
9588 "B<setgid>() sets the effective group ID of the calling process. If the "
9589 "caller is the superuser, the real GID and saved set-group-ID are also set."
9591 "B<setgid>() は呼び出し元のプロセスの実効 (effective) グループID を設定す"
9592 "る。 もしスーパーユーザーによって呼び出された場合は、 実 (real) グループID と"
9593 "保存 (saved) set-group-ID も設定される。"
9596 #: build/C/man2/setgid.2:51
9598 "Under Linux, B<setgid>() is implemented like the POSIX version with the "
9599 "B<_POSIX_SAVED_IDS> feature. This allows a set-group-ID program that is not "
9600 "set-user-ID-root to drop all of its group privileges, do some un-privileged "
9601 "work, and then reengage the original effective group ID in a secure manner."
9603 "Linux において、 B<setgid>() は B<_POSIX_SAVED_IDS> をもった POSIX 版のよう"
9604 "に実装されている。 これは set-user-ID-root でない set-group-ID プログラムにそ"
9605 "のグループの 特権の全て落とし、特権の必要ない仕事をし、本来の実効グループID "
9606 "に 安全な方法で再び戻すことを許す。"
9609 #: build/C/man2/setgid.2:64
9611 "The calling process is not privileged (does not have the B<CAP_SETGID> "
9612 "capability), and I<gid> does not match the real group ID or saved set-group-"
9613 "ID of the calling process."
9615 "呼び出し元のプロセスに権限がなく (B<CAP_SETGID> ケーパビリティがなく)、かつ "
9616 "I<gid> が呼び出し元のプロセスの実グループID と保存セットグループID のどちらと"
9620 #: build/C/man2/setgid.2:74
9622 "The original Linux B<setgid>() system call supported only 16-bit group "
9623 "IDs. Subsequently, Linux 2.4 added B<setgid32>() supporting 32-bit IDs. "
9624 "The glibc B<setgid>() wrapper function transparently deals with the "
9625 "variation across kernel versions."
9627 "元々の Linux の B<setgid>() システムコールは\n"
9628 "16 ビットのグループ ID だけに対応していた。\n"
9629 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
9630 "B<setgid32>() が追加された。\n"
9631 "glibc の B<setgid>() のラッパー関数は\n"
9632 "カーネルバージョンによるこの違いを吸収している。"
9635 #: build/C/man2/setgid.2:82
9637 "B<getgid>(2), B<setegid>(2), B<setregid>(2), B<capabilities>(7), "
9640 "B<getgid>(2), B<setegid>(2), B<setregid>(2), B<capabilities>(7), "
9644 #: build/C/man2/setpgid.2:46
9650 #: build/C/man2/setpgid.2:49
9651 msgid "setpgid, getpgid, setpgrp, getpgrp - set/get process group"
9652 msgstr "setpgid, getpgid, setpgrp, getpgrp - プロセスグループの設定/取得を行う"
9655 #: build/C/man2/setpgid.2:53
9656 msgid "B<int setpgid(pid_t >I<pid>B<, pid_t >I<pgid>B<);>"
9657 msgstr "B<int setpgid(pid_t >I<pid>B<, pid_t >I<pgid>B<);>"
9660 #: build/C/man2/setpgid.2:55
9661 msgid "B<pid_t getpgid(pid_t >I<pid>B<);>"
9662 msgstr "B<pid_t getpgid(pid_t >I<pid>B<);>"
9665 #: build/C/man2/setpgid.2:57
9666 msgid "B<pid_t getpgrp(void);> /* POSIX.1 version */"
9667 msgstr "B<pid_t getpgrp(void);> /* POSIX.1 version */"
9670 #: build/C/man2/setpgid.2:60
9672 "B<pid_t getpgrp(pid_t >I<pid>B<);\\ \\ \\ \\ \\ \\ \\ \\ \\ \\ \\ > /* BSD "
9675 "B<pid_t getpgrp(pid_t >I<pid>B<);\\ \\ \\ \\ \\ \\ \\ \\ \\ \\ \\ > /* BSD "
9679 #: build/C/man2/setpgid.2:62
9680 msgid "B<int setpgrp(void);> /* System V version */"
9681 msgstr "B<int setpgrp(void);> /* System V version */"
9684 #: build/C/man2/setpgid.2:65
9685 msgid "B<int setpgrp(pid_t >I<pid>B<, pid_t >I<pgid>B<);\\ > /* BSD version */"
9687 "B<int setpgrp(pid_t >I<pid>B<, pid_t >I<pgid>B<);\\ > /* BSD version */"
9690 #: build/C/man2/setpgid.2:74
9691 msgid "B<getpgid>():"
9692 msgstr "B<getpgid>():"
9695 #: build/C/man2/setpgid.2:82
9696 msgid "B<setpgrp>() (POSIX.1):"
9697 msgstr "B<setpgrp>() (POSIX.1):"
9700 #: build/C/man2/setpgid.2:85
9703 " _SVID_SOURCE || _XOPEN_SOURCE\\ E<gt>=\\ 500 ||\n"
9704 " _XOPEN_SOURCE\\ &&\\ _XOPEN_SOURCE_EXTENDED\n"
9706 " _SVID_SOURCE || _XOPEN_SOURCE\\ E<gt>=\\ 500 ||\n"
9707 " _XOPEN_SOURCE\\ &&\\ _XOPEN_SOURCE_EXTENDED\n"
9710 #: build/C/man2/setpgid.2:89
9711 msgid "B<setpgrp>()\\ (BSD), B<getpgrp>()\\ (BSD):"
9712 msgstr "B<setpgrp>()\\ (BSD), B<getpgrp>()\\ (BSD):"
9715 #: build/C/man2/setpgid.2:93
9719 " !\\ (_POSIX_SOURCE || _POSIX_C_SOURCE || _XOPEN_SOURCE ||\n"
9720 " _XOPEN_SOURCE_EXTENDED || _GNU_SOURCE || _SVID_SOURCE)\n"
9723 " !\\ (_POSIX_SOURCE || _POSIX_C_SOURCE || _XOPEN_SOURCE ||\n"
9724 " _XOPEN_SOURCE_EXTENDED || _GNU_SOURCE || _SVID_SOURCE)\n"
9727 #: build/C/man2/setpgid.2:105
9729 "All of these interfaces are available on Linux, and are used for getting and "
9730 "setting the process group ID (PGID) of a process. The preferred, POSIX.1-"
9731 "specified ways of doing this are: B<getpgrp>(void), for retrieving the "
9732 "calling process's PGID; and B<setpgid>(), for setting a process's PGID."
9734 "これらのインタフェースすべてが Linux で利用可能で、 これらを使ってプロセスの"
9735 "プロセスグループ ID (PGID) の 取得や設定ができる。 推奨の、POSIX.1 で規定され"
9736 "た方法では、 B<getpgrp>(void) で呼び出し元プロセスの PGID を取得し、 "
9737 "B<setpgid>() で設定する。"
9740 #: build/C/man2/setpgid.2:130
9742 "B<setpgid>() sets the PGID of the process specified by I<pid> to I<pgid>. "
9743 "If I<pid> is zero, then the process ID of the calling process is used. If "
9744 "I<pgid> is zero, then the PGID of the process specified by I<pid> is made "
9745 "the same as its process ID. If B<setpgid>() is used to move a process from "
9746 "one process group to another (as is done by some shells when creating "
9747 "pipelines), both process groups must be part of the same session (see "
9748 "B<setsid>(2) and B<credentials>(7)). In this case, the I<pgid> specifies "
9749 "an existing process group to be joined and the session ID of that group must "
9750 "match the session ID of the joining process."
9752 "B<setpgid>() は I<pid> で指定したプロセスの PGID に I<pgid> を設定する。 "
9753 "I<pid> がゼロならば、呼び出し元プロセスのプロセス ID が pid として使用され"
9754 "る。 I<pgid> がゼロならば、 I<pid> で指定されたプロセスの PGID がそのプロセス"
9755 "のプロセス ID と 同じに設定される。 B<setpgid>() をプロセスをあるプロセスグ"
9756 "ループから別のグループへ 移動するために使用する場合は (一部のシェルはパイプラ"
9757 "インを生成 する時にこれを行う)、両方のプロセスグループは同じセッションの 一部"
9758 "でなければならない (B<setsid>(2) と B<credentials>(7) 参照)。この場合は "
9759 "I<pgid> は参加すべき既存の プロセスグループを指定し、そのセッション ID は参加"
9760 "するプロセスの セッション ID に一致しなければならない。"
9763 #: build/C/man2/setpgid.2:135
9765 "The POSIX.1 version of B<getpgrp>(), which takes no arguments, returns the "
9766 "PGID of the calling process."
9768 "POSIX.1 バージョンの B<getpgrp>() は引き数を一つもとらず、 呼び出し元プロセ"
9772 #: build/C/man2/setpgid.2:146
9774 "B<getpgid>() returns the PGID of the process specified by I<pid>. If "
9775 "I<pid> is zero, the process ID of the calling process is used. (Retrieving "
9776 "the PGID of a process other than the caller is rarely necessary, and the "
9777 "POSIX.1 B<getpgrp>() is preferred for that task.)"
9779 "B<getpgid>() は I<pid> で指定されたプロセスの PGID を返す。 I<pid> がゼロな"
9780 "らば、呼び出し元プロセスのプロセス ID が pid として使用される。 (呼び出し元プ"
9781 "ロセス以外のプロセスの PGID の取得が必要になることは めったになく、呼び出し元"
9782 "プロセスの PGID を取得するには POSIX.1 バージョンの B<getpgrp>() を使うのが"
9786 #: build/C/man2/setpgid.2:151
9788 "The System V-style B<setpgrp>(), which takes no arguments, is equivalent to "
9789 "I<setpgid(0,\\ 0)>."
9791 "System V バージョンの B<setpgrp>() は引き数を一つもとらず、 I<setpgid(0,\\ "
9794 #. The true BSD setpgrp() system call differs in allowing the PGID
9795 #. to be set to arbitrary values, rather than being restricted to
9796 #. PGIDs in the same session.
9798 #: build/C/man2/setpgid.2:163
9800 "The BSD-specific B<setpgrp>() call, which takes arguments I<pid> and "
9801 "I<pgid>, is equivalent to I<setpgid(pid, pgid)>."
9803 "BSD 仕様の B<setpgrp>() は I<pid> と I<pgid> を引き数にとり、 I<setpgid"
9804 "(pid, pgid)> と等価である。"
9807 #: build/C/man2/setpgid.2:170
9809 "The BSD-specific B<getpgrp>() call, which takes a single I<pid> argument, "
9810 "is equivalent to I<getpgid(pid)>."
9812 "BSD 仕様の B<getpgrp>() は I<pid> だけを引き数にとり、 I<getpgid(pid)> と等"
9816 #: build/C/man2/setpgid.2:179
9818 "On success, B<setpgid>() and B<setpgrp>() return zero. On error, -1 is "
9819 "returned, and I<errno> is set appropriately."
9821 "B<setpgid>() と B<setpgrp>() は成功した場合、ゼロを返す。エラーの場合は -1 "
9822 "を返し、 I<errno> が適切に設定される。"
9825 #: build/C/man2/setpgid.2:183
9826 msgid "The POSIX.1 B<getpgrp>() always returns the PGID of the caller."
9828 "POSIX.1 バージョンの B<getpgrp>() は常に呼び出しプロセスの PGID を返す。"
9831 #: build/C/man2/setpgid.2:191
9833 "B<getpgid>(), and the BSD-specific B<getpgrp>() return a process group on "
9834 "success. On error, -1 is returned, and I<errno> is set appropriately."
9836 "B<getpgid>() と BSD 仕様の B<getpgrp>() は成功した場合プロセスグループを返"
9837 "す。 エラーの場合は -1 を返し、 I<errno> が適切に設定される。"
9840 #: build/C/man2/setpgid.2:200
9842 "An attempt was made to change the process group ID of one of the children of "
9843 "the calling process and the child had already performed an B<execve>(2) "
9844 "(B<setpgid>(), B<setpgrp>())."
9846 "呼び出し元プロセスの子プロセスのプロセスグループ ID を変更しようとしたが、 す"
9847 "でにその子プロセスは B<execve>(2) を実行していた。 (B<setpgid>(), B<setpgrp>"
9851 #: build/C/man2/setpgid.2:206
9852 msgid "I<pgid> is less than 0 (B<setpgid>(), B<setpgrp>())."
9853 msgstr "I<pgid> が 0 より小さい。 (B<setpgid>(), B<setpgrp>())"
9856 #: build/C/man2/setpgid.2:215
9858 "An attempt was made to move a process into a process group in a different "
9859 "session, or to change the process group ID of one of the children of the "
9860 "calling process and the child was in a different session, or to change the "
9861 "process group ID of a session leader (B<setpgid>(), B<setpgrp>())."
9863 "プロセスを異なるセッションのプロセスグループに移動させようとした。 または呼び"
9864 "出し元プロセスの子プロセスのプロセスグループ ID を変更しようと したが、その子"
9865 "プロセスは別のセッションだった。 またはセッションリーダーのプロセスグループ "
9866 "ID を変更しようとした。 (B<setpgid>(), B<setpgrp>())"
9869 #: build/C/man2/setpgid.2:225
9871 "For B<getpgid>(): I<pid> does not match any process. For B<setpgid>(): "
9872 "I<pid> is not the calling process and not a child of the calling process."
9874 "B<getpgid>() の場合: I<pid> がどのプロセスにも一致しない。 B<setpgid>() の"
9875 "場合: I<pid> が呼び出し元のプロセスではなく、呼び出し元のプロセスの子プロセス"
9879 #: build/C/man2/setpgid.2:231
9881 "B<setpgid>() and the version of B<getpgrp>() with no arguments conform to "
9884 "B<setpgid>() と、引き数なしバージョンの B<getpgrp>() は POSIX.1-2001 に準拠"
9888 #: build/C/man2/setpgid.2:240
9890 "POSIX.1-2001 also specifies B<getpgid>() and the version of B<setpgrp>() "
9891 "that takes no arguments. (POSIX.1-2008 marks this B<setpgrp>() "
9892 "specification as obsolete.)"
9894 "POSIX.1-2001 は、 B<getpgid>() と、引き数なしバージョンの B<setpgrp>() も規"
9895 "定している。 POSIX.1-2008 は、この B<setpgrp>() の仕様を廃止予定としている。"
9898 #: build/C/man2/setpgid.2:247
9900 "The version of B<getpgrp>() with one argument and the version of B<setpgrp>"
9901 "() that takes two arguments derive from 4.2BSD, and are not specified by "
9904 "引き数 1 個バージョンの B<getpgrp>() と引き数 2 個バージョンの B<setpgrp>"
9905 "() は 4.2BSD に由来し、 POSIX.1 では規定されていない。"
9908 #: build/C/man2/setpgid.2:253
9910 "A child created via B<fork>(2) inherits its parent's process group ID. The "
9911 "PGID is preserved across an B<execve>(2)."
9913 "B<fork>(2) で作成された子プロセスは、親プロセスの PGID を継承する。 "
9914 "B<execve>(2) の前後で PGID は保存される。"
9917 #: build/C/man2/setpgid.2:256
9919 "Each process group is a member of a session and each process is a member of "
9920 "the session of which its process group is a member."
9922 "各プロセスグループはセッションのメンバーであり、各プロセスは そのプロセスグ"
9923 "ループが所属しているセッションのメンバーである。"
9926 #: build/C/man2/setpgid.2:283
9928 "A session can have a controlling terminal. At any time, one (and only one) "
9929 "of the process groups in the session can be the foreground process group for "
9930 "the terminal; the remaining process groups are in the background. If a "
9931 "signal is generated from the terminal (e.g., typing the interrupt key to "
9932 "generate B<SIGINT>), that signal is sent to the foreground process group. "
9933 "(See B<termios>(3) for a description of the characters that generate "
9934 "signals.) Only the foreground process group may B<read>(2) from the "
9935 "terminal; if a background process group tries to B<read>(2) from the "
9936 "terminal, then the group is sent a B<SIGTSTP> signal, which suspends it. "
9937 "The B<tcgetpgrp>(3) and B<tcsetpgrp>(3) functions are used to get/set the "
9938 "foreground process group of the controlling terminal."
9940 "セッションは制御端末 (controlling terminal) を持つことができる。 いつでも、"
9941 "セッションに所属するプロセスグループの一つ (だけ) が 端末のフォアグランドのプ"
9942 "ロセスグループになることができ、 残りのプロセスグループはバックグラウンドにな"
9943 "る。 端末からシグナルが生成された場合 (例えば、中断キーを叩いて B<SIGINT> が"
9944 "生成されるなど)、そのシグナルはフォアグラウンドのプロセスグループ に送られる "
9945 "(シグナルを生成する文字の説明は B<termios>(3) を参照)。 フォアグラウンドのプ"
9946 "ロセスグループだけが端末からの B<read>(2) ができる。 バックグラウンドのプロ"
9947 "セスグループが端末からの B<read>(2) を行おうとした場合、そのプロセスグループ"
9948 "にはシグナル B<SIGTSTP> が送られ、そのプロセスグループは一時停止 (suspend) す"
9949 "る。 関数 B<tcgetpgrp>(3) と B<tcsetpgrp>(3) を使うと、制御端末のフォアグラ"
9950 "ウンドのプロセスグループを 取得/設定できる。"
9953 #: build/C/man2/setpgid.2:291
9955 "The B<setpgid>() and B<getpgrp>() calls are used by programs such as "
9956 "B<bash>(1) to create process groups in order to implement shell job control."
9958 "B<setpgid>() と B<getpgrp>() は、 B<bash>(1) のようなプログラムで、シェル"
9959 "のジョブ制御 (job control) の実装のための プロセスグループを作成するのに使わ"
9963 #: build/C/man2/setpgid.2:301
9965 "If a session has a controlling terminal, and the B<CLOCAL> flag for that "
9966 "terminal is not set, and a terminal hangup occurs, then the session leader "
9967 "is sent a B<SIGHUP>. If the session leader exits, then a B<SIGHUP> signal "
9968 "will also be sent to each process in the foreground process group of the "
9969 "controlling terminal."
9971 "セッションが制御端末を持っていて、その端末に対して B<CLOCAL> フラグが設定され"
9972 "ておらず、端末のハングアップが起きた場合、 セッション・リーダーに B<SIGHUP> "
9973 "が送られる。 セッション・リーダーが終了した場合には、その制御端末の フォアグ"
9974 "ランドのプロセスグループに所属する各プロセスにも B<SIGHUP> シグナルが送られ"
9977 #. exit.3 refers to the following text:
9979 #: build/C/man2/setpgid.2:315
9981 "If the exit of the process causes a process group to become orphaned, and if "
9982 "any member of the newly orphaned process group is stopped, then a B<SIGHUP> "
9983 "signal followed by a B<SIGCONT> signal will be sent to each process in the "
9984 "newly orphaned process group. An orphaned process group is one in which the "
9985 "parent of every member of process group is either itself also a member of "
9986 "the process group or is a member of a process group in a different session "
9987 "(see also B<credentials>(7))."
9989 "プロセスの終了によってプロセスグループが孤児 (orphaned) になった際に、 その新"
9990 "たに孤児になったプロセスグループに停止しているメンバーがいれば、 その孤児に"
9991 "なったプロセスグループに属す全てのプロセスに B<SIGHUP> シグナルに続けて "
9992 "B<SIGCONT> シグナルが送られる。 孤児になった (orphaned) プロセスグループと"
9993 "は、 そのプロセスグループの全てのメンバーについて、メンバーの親プロセスが、 "
9994 "親プロセス自身もそのプロセスグループのメンバーか、 別のセッションに属すプロセ"
9995 "スグループのメンバーのいずれかであるような、 プロセスグループのことである。"
9998 #: build/C/man2/setpgid.2:322
10000 "B<getuid>(2), B<setsid>(2), B<tcgetpgrp>(3), B<tcsetpgrp>(3), B<termios>(3), "
10001 "B<credentials>(7)"
10003 "B<getuid>(2), B<setsid>(2), B<tcgetpgrp>(3), B<tcsetpgrp>(3), B<termios>(3), "
10004 "B<credentials>(7)"
10007 #: build/C/man2/setresuid.2:26
10012 #. type: Plain text
10013 #: build/C/man2/setresuid.2:29
10014 msgid "setresuid, setresgid - set real, effective and saved user or group ID"
10015 msgstr "setresuid, setresgid - ユーザやグループの 実、実効、保存 ID を設定する"
10017 #. type: Plain text
10018 #: build/C/man2/setresuid.2:35
10019 msgid "B<int setresuid(uid_t >I<ruid>B<, uid_t >I<euid>B<, uid_t >I<suid>B<);>"
10021 "B<int setresuid(uid_t >I<ruid>B<, uid_t >I<euid>B<, uid_t >I<suid>B<);>"
10023 #. type: Plain text
10024 #: build/C/man2/setresuid.2:37
10025 msgid "B<int setresgid(gid_t >I<rgid>B<, gid_t >I<egid>B<, gid_t >I<sgid>B<);>"
10027 "B<int setresgid(gid_t >I<rgid>B<, gid_t >I<egid>B<, gid_t >I<sgid>B<);>"
10029 #. type: Plain text
10030 #: build/C/man2/setresuid.2:41
10032 "B<setresuid>() sets the real user ID, the effective user ID, and the saved "
10033 "set-user-ID of the calling process."
10035 "B<setresuid>() は呼び出し元のプロセスの実 (real) ユーザーID、実効 "
10036 "(effective) ユーザーID、 保存 set-user-ID を設定する。"
10038 #. type: Plain text
10039 #: build/C/man2/setresuid.2:47
10041 "Unprivileged user processes may change the real UID, effective UID, and "
10042 "saved set-user-ID, each to one of: the current real UID, the current "
10043 "effective UID or the current saved set-user-ID."
10045 "非特権ユーザーのプロセスは、その実 UID、実効 UID、保存 set-user-ID を、 現在"
10046 "の実 UID、現在の実効 UID、現在の保存 set-user-ID のどれかに変更することができ"
10049 #. type: Plain text
10050 #: build/C/man2/setresuid.2:51
10052 "Privileged processes (on Linux, those having the B<CAP_SETUID> capability) "
10053 "may set the real UID, effective UID, and saved set-user-ID to arbitrary "
10056 "特権プロセス (Linux では B<CAP_SETUID> ケーパビリティ (capability) を持つ プ"
10057 "ロセス) は、実 UID、実効 UID、保存 set-user-ID を任意の値に設定できる。"
10059 #. type: Plain text
10060 #: build/C/man2/setresuid.2:53
10062 "If one of the arguments equals -1, the corresponding value is not changed."
10063 msgstr "引き数のどれかが -1 の場合はその値は変更されずに残される。"
10065 #. type: Plain text
10066 #: build/C/man2/setresuid.2:57
10068 "Regardless of what changes are made to the real UID, effective UID, and "
10069 "saved set-user-ID, the file system UID is always set to the same value as "
10070 "the (possibly new) effective UID."
10072 "実 UID、実効 UID、保存 set-user-ID にどんな変更が行われたかに関わらず、 ファ"
10073 "イルシステム UID は常に実効 UID (可能であれば変更後の新しい実効 UID) と同じ"
10076 #. type: Plain text
10077 #: build/C/man2/setresuid.2:64
10079 "Completely analogously, B<setresgid>() sets the real GID, effective GID, "
10080 "and saved set-group-ID of the calling process (and always modifies the file "
10081 "system GID to be the same as the effective GID), with the same restrictions "
10082 "for unprivileged processes."
10084 "全く同じように、 B<setresgid>() は呼び出し元のプロセスの実 GID、実効 GID、保"
10085 "存 set-group-ID を設定する (さらにファイルシステム GID を実効 GID と同じ値に"
10086 "修正する)。 非特権プロセスは同様の制限を受ける。"
10089 #: build/C/man2/setresuid.2:70 build/C/man2/setuid.2:74
10094 #. type: Plain text
10095 #: build/C/man2/setresuid.2:77
10097 "I<uid> does not match the current UID and this call would bring that user ID "
10098 "over its B<RLIMIT_NPROC> resource limit."
10100 "I<uid> が現在のユーザー ID と違う値で、 この呼び出しにより ユーザー ID が リ"
10101 "ソース上限 B<RLIMIT_NPROC> を超えてしまう。"
10103 #. type: Plain text
10104 #: build/C/man2/setresuid.2:81
10106 "The calling process is not privileged (did not have the B<CAP_SETUID> "
10107 "capability) and tried to change the IDs to values that are not permitted."
10109 "呼び出したプロセスが特権を持たないのに (B<CAP_SETUID> ケーパビリティを持たな"
10110 "いのに)、 ID を許されていない値に変更しようとした。"
10112 #. type: Plain text
10113 #: build/C/man2/setresuid.2:83
10114 msgid "These calls are available under Linux since Linux 2.1.44."
10115 msgstr "Linux ではバージョン 2.1.44 より利用可能になった。"
10117 #. type: Plain text
10118 #: build/C/man2/setresuid.2:90
10120 "Under HP-UX and FreeBSD, the prototype is found in I<E<lt>unistd.hE<gt>>. "
10121 "Under Linux the prototype is provided by glibc since version 2.3.2."
10123 "HP-UX や FreeBSD では I<E<lt>unistd.hE<gt>> にプロトタイプが存在する。 \n"
10124 "Linux では、glibc 2.3.2 以降で プロトタイプが提供されている。"
10126 #. type: Plain text
10127 #: build/C/man2/setresuid.2:106
10129 "The original Linux B<setresuid>() and B<setresgid>() system calls "
10130 "supported only 16-bit user and group IDs. Subsequently, Linux 2.4 added "
10131 "B<setresuid32>() and B<setresgid32>(), supporting 32-bit IDs. The glibc "
10132 "B<setresuid>() and B<setresgid>() wrapper functions transparently deal "
10133 "with the variations across kernel versions."
10135 "元々の Linux の B<setresuid>() と B<setresgid>() システムコールは\n"
10136 "16 ビットのグループ ID だけに対応していた。\n"
10137 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
10138 "B<setresuid32>() と B<setresgid32>() が追加された。\n"
10139 "glibc の B<setresuid>() と B<setresgid>() のラッパー関数は\n"
10140 "カーネルバージョンによるこの違いを吸収している。"
10142 #. type: Plain text
10143 #: build/C/man2/setresuid.2:115
10145 "B<getresuid>(2), B<getuid>(2), B<setfsgid>(2), B<setfsuid>(2), B<setreuid>"
10146 "(2), B<setuid>(2), B<capabilities>(7), B<credentials>(7)"
10148 "B<getresuid>(2), B<getuid>(2), B<setfsgid>(2), B<setfsuid>(2), B<setreuid>"
10149 "(2), B<setuid>(2), B<capabilities>(7), B<credentials>(7)"
10152 #: build/C/man2/setreuid.2:43
10157 #. type: Plain text
10158 #: build/C/man2/setreuid.2:46
10159 msgid "setreuid, setregid - set real and/or effective user or group ID"
10161 "setreuid, setregid - 実 (real) と実効 (effective) ユーザー (グループ) ID を設"
10164 #. type: Plain text
10165 #: build/C/man2/setreuid.2:52
10166 msgid "B<int setreuid(uid_t >I<ruid>B<, uid_t >I<euid>B<);>"
10167 msgstr "B<int setreuid(uid_t >I<ruid>B<, uid_t >I<euid>B<);>"
10169 #. type: Plain text
10170 #: build/C/man2/setreuid.2:54
10171 msgid "B<int setregid(gid_t >I<rgid>B<, gid_t >I<egid>B<);>"
10172 msgstr "B<int setregid(gid_t >I<rgid>B<, gid_t >I<egid>B<);>"
10174 #. type: Plain text
10175 #: build/C/man2/setreuid.2:62
10176 msgid "B<setreuid>(), B<setregid>():"
10177 msgstr "B<setreuid>(), B<setregid>():"
10179 #. type: Plain text
10180 #: build/C/man2/setreuid.2:66
10182 "_BSD_SOURCE || _XOPEN_SOURCE\\ E<gt>=\\ 500 || _XOPEN_SOURCE\\ &&\\ "
10183 "_XOPEN_SOURCE_EXTENDED"
10185 "_BSD_SOURCE || _XOPEN_SOURCE\\ E<gt>=\\ 500 || _XOPEN_SOURCE\\ &&\\ "
10186 "_XOPEN_SOURCE_EXTENDED"
10188 #. type: Plain text
10189 #: build/C/man2/setreuid.2:71
10190 msgid "B<setreuid>() sets real and effective user IDs of the calling process."
10192 "B<setreuid>() は呼び出し元のプロセスの実 (real) ユーザー ID と 実効 "
10193 "(effective) ユーザー ID を設定する。"
10195 #. type: Plain text
10196 #: build/C/man2/setreuid.2:74
10198 "Supplying a value of -1 for either the real or effective user ID forces the "
10199 "system to leave that ID unchanged."
10201 "実ユーザー ID や実効ユーザー ID に -1 を与えた場合、 システムはその ID を変更"
10204 #. type: Plain text
10205 #: build/C/man2/setreuid.2:77
10207 "Unprivileged processes may only set the effective user ID to the real user "
10208 "ID, the effective user ID, or the saved set-user-ID."
10210 "非特権プロセスは実効ユーザー ID を実ユーザー ID または実効ユーザー ID または "
10211 "保存 set-user-ID にしか設定できない。"
10213 #. type: Plain text
10214 #: build/C/man2/setreuid.2:80
10216 "Unprivileged users may only set the real user ID to the real user ID or the "
10217 "effective user ID."
10219 "非特権ユーザーは、実ユーザー ID を実ユーザー ID または 実効ユーザー ID にしか"
10222 #. type: Plain text
10223 #: build/C/man2/setreuid.2:84
10225 "If the real user ID is set or the effective user ID is set to a value not "
10226 "equal to the previous real user ID, the saved set-user-ID will be set to the "
10227 "new effective user ID."
10229 "実ユーザーID が設定されたり、実効ユーザーID が前の実ユーザーID と 異った値に"
10230 "設定された場合、保存 set-user-ID には新しい実効ユーザーID の値が設定される。"
10232 #. type: Plain text
10233 #: build/C/man2/setreuid.2:89
10235 "Completely analogously, B<setregid>() sets real and effective group ID's of "
10236 "the calling process, and all of the above holds with \"group\" instead of "
10239 "これと全く同様に、 B<setregid>() は呼び出し元のプロセスの実グループ ID と実"
10240 "効グループ ID を設定し、 上記の説明で「ユーザー」を「グループ」に読み替えたこ"
10243 #. type: Plain text
10244 #: build/C/man2/setreuid.2:111
10246 "The calling process is not privileged (Linux: does not have the "
10247 "B<CAP_SETUID> capability in the case of B<setreuid>(), or the B<CAP_SETGID> "
10248 "capability in the case of B<setregid>()) and a change other than (i) "
10249 "swapping the effective user (group) ID with the real user (group) ID, or "
10250 "(ii) setting one to the value of the other or (iii) setting the effective "
10251 "user (group) ID to the value of the saved set-user-ID (saved set-group-ID) "
10254 "呼び出し元のプロセスに特権がなく (Linux では B<setreuid>() の場合に "
10255 "B<CAP_SETUID> ケーパビリティ (capability) がなく、 B<setregid>() の場合に "
10256 "B<CAP_SETGID> ケーパビリティがない)、 以下のいずれでもない変更が指定された: "
10257 "(i) 実効ユーザー (グループ) ID と実ユーザー (グループ) ID を入れ換える。 "
10258 "(ii) 片方の値を他方に設定する。 (iii) 実効ユーザー (グループ) ID に保存 set-"
10259 "user-ID (保存 set-group-ID) の値を設定する。"
10261 #. type: Plain text
10262 #: build/C/man2/setreuid.2:117
10264 "POSIX.1-2001, 4.3BSD (the B<setreuid>() and B<setregid>() function calls "
10265 "first appeared in 4.2BSD)."
10267 "POSIX.1-2001, 4.3BSD (B<setreuid>() と B<setregid>() 関数コールは 4.2BSD で"
10270 #. type: Plain text
10271 #: build/C/man2/setreuid.2:121
10273 "Setting the effective user (group) ID to the saved set-user-ID (saved set-"
10274 "group-ID) is possible since Linux 1.1.37 (1.1.38)."
10276 "実効ユーザー (グループ) ID を保存ユーザー (グループ) ID に 設定することが、"
10277 "Linux 1.1.37 (1.1.38) から可能になった。"
10279 #. type: Plain text
10280 #: build/C/man2/setreuid.2:138
10282 "POSIX.1 does not specify all of possible ID changes that are permitted on "
10283 "Linux for an unprivileged process. For B<setreuid>(), the effective user ID "
10284 "can be made the same as the real user ID or the save set-user-ID, and it is "
10285 "unspecified whether unprivileged processes may set the real user ID to the "
10286 "real user ID, the effective user ID, or the saved set-user-ID. For "
10287 "B<setregid>(), the real group ID can be changed to the value of the saved "
10288 "set-group-ID, and the effective group ID can be changed to the value of the "
10289 "real group ID or the saved set-group-ID. The precise details of what ID "
10290 "changes are permitted vary across implementations."
10292 "POSIX.1 では、非特権プロセスに対して Linux 上で認められている ID の変更の 全"
10293 "パターンを規定しているわけではない。 B<setreuid>() では、実効ユーザ ID を実"
10294 "ユーザ ID もしくは保存 set-user-ID と 同じ値にすることができるが、 非特権プロ"
10295 "セスが実ユーザ ID を実ユーザ ID、実効ユーザ ID、 保存 set-user-ID のどの値に"
10296 "も設定できるかは規定されていない。 B<setregid>() では、実グループ ID を保存 "
10297 "set-group-ID と同じ値に変更でき、 実効グループ ID を実グループ ID や保存 set-"
10298 "group-ID と同じ値に変更できる。 どのような ID の変更が認められているかの正確"
10301 #. type: Plain text
10302 #: build/C/man2/setreuid.2:141
10304 "POSIX.1 makes no specification about the effect of these calls on the saved "
10305 "set-user-ID and saved set-group-ID."
10307 "POSIX.1 では、これらのシステムコールが保存 set-user-ID や 保存 set-group-ID "
10308 "に与える影響については規定していない。"
10310 #. type: Plain text
10311 #: build/C/man2/setreuid.2:157
10313 "The original Linux B<setreuid>() and B<setregid>() system calls supported "
10314 "only 16-bit user and group IDs. Subsequently, Linux 2.4 added B<setreuid32>"
10315 "() and B<setregid32>(), supporting 32-bit IDs. The glibc B<setreuid>() "
10316 "and B<setregid>() wrapper functions transparently deal with the variations "
10317 "across kernel versions."
10319 "元々の Linux の B<setreuid>() と B<setregid>() システムコールは\n"
10320 "16 ビットのグループ ID だけに対応していた。\n"
10321 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
10322 "B<setreuid32>() と B<setregid32>() が追加された。\n"
10323 "glibc の B<setreuid>() と B<setregid>() のラッパー関数は\n"
10324 "カーネルバージョンによるこの違いを吸収している。"
10326 #. type: Plain text
10327 #: build/C/man2/setreuid.2:165
10329 "B<getgid>(2), B<getuid>(2), B<seteuid>(2), B<setgid>(2), B<setresuid>(2), "
10330 "B<setuid>(2), B<capabilities>(7)"
10332 "B<getgid>(2), B<getuid>(2), B<seteuid>(2), B<setgid>(2), B<setresuid>(2), "
10333 "B<setuid>(2), B<capabilities>(7)"
10336 #: build/C/man2/setsid.2:29
10342 #: build/C/man2/setsid.2:29
10345 msgstr "2008-12-03"
10347 #. type: Plain text
10348 #: build/C/man2/setsid.2:32
10349 msgid "setsid - creates a session and sets the process group ID"
10350 msgstr "setsid - セッション (session) を作成し、プロセスグループ ID を設定する"
10352 #. type: Plain text
10353 #: build/C/man2/setsid.2:37
10354 msgid "B<pid_t setsid(void);>"
10355 msgstr "B<pid_t setsid(void);>"
10357 #. type: Plain text
10358 #: build/C/man2/setsid.2:50
10360 "B<setsid>() creates a new session if the calling process is not a process "
10361 "group leader. The calling process is the leader of the new session, the "
10362 "process group leader of the new process group, and has no controlling tty. "
10363 "The process group ID and session ID of the calling process are set to the "
10364 "PID of the calling process. The calling process will be the only process in "
10365 "this new process group and in this new session."
10367 "B<setsid>() は呼び出したプロセスがプロセスグループ・リーダー (process group "
10368 "leader) でなければ、新しいセッションを作成する。 呼び出したプロセスは新しい"
10369 "セッションのリーダー、新しいプロセスグループの プロセスグループ・リーダーとな"
10370 "り、tty の制御を持たない。 呼び出したプロセスのプロセスグループ ID とセッショ"
10371 "ン ID には、 呼び出したプロセスの PID が設定される。呼び出したプロセスはこの "
10372 "新しいプロセスグループ、この新しいセッションの唯一のプロセスとなる。"
10374 #. type: Plain text
10375 #: build/C/man2/setsid.2:57
10377 "On success, the (new) session ID of the calling process is returned. On "
10378 "error, I<(pid_t)\\ -1> is returned, and I<errno> is set to indicate the "
10381 "成功すると、呼び出したプロセスの (新しい) セッション ID が返される。 エラーの"
10382 "場合は、 I<(pid_t)\\ -1> が返され、 I<error> にエラーを示す値が設定される。"
10384 #. type: Plain text
10385 #: build/C/man2/setsid.2:64
10387 "The process group ID of any process equals the PID of the calling process. "
10388 "Thus, in particular, B<setsid>() fails if the calling process is already a "
10389 "process group leader."
10391 "いずれかのプロセスのプロセスグループ ID が、 呼び出したプロセスの PID と等し"
10392 "い。 これは、呼び出したプロセスが既にプロセスリーダーの場合には B<setsid>() "
10395 #. type: Plain text
10396 #: build/C/man2/setsid.2:72
10398 "A child created via B<fork>(2) inherits its parent's session ID. The "
10399 "session ID is preserved across an B<execve>(2)."
10401 "B<fork>(2) で作成された子プロセスは、親プロセスのセッション ID を継承する。 "
10402 "B<execve>(2) の前後でセッション ID は保存される。"
10404 #. type: Plain text
10405 #: build/C/man2/setsid.2:83
10407 "A process group leader is a process with process group ID equal to its PID. "
10408 "In order to be sure that B<setsid>() will succeed, B<fork>(2) and B<_exit>"
10409 "(2), and have the child do B<setsid>()."
10411 "プロセスグループ・リーダーとは、そのプロセスのプロセスグループ ID が その "
10412 "PID に等しいプロセスである。 B<setsid>() を確実に成功させるためには、 "
10413 "B<fork>(2) して B<exit>(2) し、子プロセスで B<setsid>() を行なえば良い。"
10415 #. type: Plain text
10416 #: build/C/man2/setsid.2:89
10418 "B<getsid>(2), B<setpgid>(2), B<setpgrp>(2), B<tcgetsid>(3), B<credentials>(7)"
10420 "B<getsid>(2), B<setpgid>(2), B<setpgrp>(2), B<tcgetsid>(3), B<credentials>(7)"
10423 #: build/C/man2/setuid.2:28
10428 #. type: Plain text
10429 #: build/C/man2/setuid.2:31
10430 msgid "setuid - set user identity"
10431 msgstr "setuid - ユーザー識別 (identity) を設定する"
10433 #. type: Plain text
10434 #: build/C/man2/setuid.2:37
10435 msgid "B<int setuid(uid_t >I<uid>B<);>"
10436 msgstr "B<int setuid(uid_t >I<uid>B<);>"
10438 #. type: Plain text
10439 #: build/C/man2/setuid.2:42
10441 "B<setuid>() sets the effective user ID of the calling process. If the "
10442 "effective UID of the caller is root, the real UID and saved set-user-ID are "
10445 "B<setuid>() は呼び出し元のプロセスの実効 (effective) ユーザー ID を設定す"
10446 "る。 もし呼び出し元プロセスの実効 UID が root ならば、 実 (real) UID と保存 "
10447 "(saved) set-user-ID も設定される。"
10449 #. type: Plain text
10450 #: build/C/man2/setuid.2:51
10452 "Under Linux, B<setuid>() is implemented like the POSIX version with the "
10453 "B<_POSIX_SAVED_IDS> feature. This allows a set-user-ID (other than root) "
10454 "program to drop all of its user privileges, do some un-privileged work, and "
10455 "then reengage the original effective user ID in a secure manner."
10457 "Linux では、 B<setuid>() は B<_POSIX_SAVED_IDS> をもった POSIX 版のように実"
10458 "装されている。 これは (ルート以外の) set-user-ID プログラムにそのユーザーの特"
10459 "権を 全て与え、特権の必要ない仕事をし、本来の実効ユーザー ID に 安全な方法で"
10462 #. type: Plain text
10463 #: build/C/man2/setuid.2:61
10465 "If the user is root or the program is set-user-ID-root, special care must be "
10466 "taken. The B<setuid>() function checks the effective user ID of the caller "
10467 "and if it is the superuser, all process-related user ID's are set to "
10468 "I<uid>. After this has occurred, it is impossible for the program to regain "
10471 "ユーザーが root またはプログラムが root に set-user-ID されているならば、 特"
10472 "別の注意が払われる。 B<setuid>() 関数は呼び出し者の実効ユーザー ID をチェッ"
10473 "クし、 それがスーパーユーザーならば、 プロセスに関連する全てのユーザー ID に "
10474 "I<uid> を設定する。 これが行なわれた後にはプログラムが再びルートの特権を得る"
10477 #. type: Plain text
10478 #: build/C/man2/setuid.2:68
10480 "Thus, a set-user-ID-root program wishing to temporarily drop root "
10481 "privileges, assume the identity of an unprivileged user, and then regain "
10482 "root privileges afterward cannot use B<setuid>(). You can accomplish this "
10483 "with B<seteuid>(2)."
10485 "したがって、set-user-ID-root プログラムで、一時的にルート特権を解除し、 非特"
10486 "権ユーザであるかのように振舞い、後でルート権限をもう一度得ようと する場合に"
10487 "は、 B<setuid>() を使うことができない。その場合には、 B<seteuid>(2) を使う"
10490 #. type: Plain text
10491 #: build/C/man2/setuid.2:83
10493 "The I<uid> does not match the current uid and I<uid> brings process over its "
10494 "B<RLIMIT_NPROC> resource limit."
10496 "I<uid> が現在のユーザー ID とマッチせず、この I<uid> によってプロセスがリソー"
10497 "ス上限 B<RLIMIT_NPROC> を超えた。"
10499 #. type: Plain text
10500 #: build/C/man2/setuid.2:90
10502 "The user is not privileged (Linux: does not have the B<CAP_SETUID> "
10503 "capability) and I<uid> does not match the real UID or saved set-user-ID of "
10504 "the calling process."
10506 "ユーザーが特権を持たず (Linux では B<CAP_SETUID> ケーパビリティ (capability) "
10507 "を持たず)、 I<uid> が呼び出し元プロセスの実 UID または保存 set-user-ID と一致"
10510 #. SVr4 documents an additional EINVAL error condition.
10511 #. type: Plain text
10512 #: build/C/man2/setuid.2:95
10514 "SVr4, POSIX.1-2001. Not quite compatible with the 4.4BSD call, which sets "
10515 "all of the real, saved, and effective user IDs."
10517 "SVr4, POSIX.1-2001. 4.4BSD のコールとは完全な互換性はない、 BSD のコールは"
10518 "実 (real)、保存 (saved)、実効 (effective) ID の全てを設定する。"
10520 #. type: Plain text
10521 #: build/C/man2/setuid.2:103
10523 "Linux has the concept of the file system user ID, normally equal to the "
10524 "effective user ID. The B<setuid>() call also sets the file system user ID "
10525 "of the calling process. See B<setfsuid>(2)."
10527 "Linux はファイルシステム・ユーザー ID の概念を持つ。\n"
10528 "通常、これは実効ユーザー ID に等しい。 \n"
10529 "B<setuid>() コールは呼び出し元のプロセスの\n"
10530 "ファイルシステム・ユーザー ID も設定する。 \n"
10531 "B<setfsuid>(2) も参照すること。"
10533 #. type: Plain text
10534 #: build/C/man2/setuid.2:108
10536 "If I<uid> is different from the old effective UID, the process will be "
10537 "forbidden from leaving core dumps."
10539 "I<uid> が前の実効 UID と異っていた場合、\n"
10540 "プロセスはコアダンプすることを禁止される。"
10542 #. type: Plain text
10543 #: build/C/man2/setuid.2:118
10545 "The original Linux B<setuid>() system call supported only 16-bit user IDs. "
10546 "Subsequently, Linux 2.4 added B<setuid32>() supporting 32-bit IDs. The "
10547 "glibc B<setuid>() wrapper function transparently deals with the variation "
10548 "across kernel versions."
10550 "元々の Linux の B<setuid>() システムコールは\n"
10551 "16 ビットのグループ ID だけに対応していた。\n"
10552 "その後、Linux 2.4 で、32 ビットの ID に対応した\n"
10553 "B<setuid32>() が追加された。\n"
10554 "glibc の B<setuid>() のラッパー関数は\n"
10555 "カーネルバージョンによるこの違いを吸収している。"
10557 #. type: Plain text
10558 #: build/C/man2/setuid.2:125
10560 "B<getuid>(2), B<seteuid>(2), B<setfsuid>(2), B<setreuid>(2), B<capabilities>"
10561 "(7), B<credentials>(7)"
10563 "B<getuid>(2), B<seteuid>(2), B<setfsuid>(2), B<setreuid>(2), B<capabilities>"
10564 "(7), B<credentials>(7)"
10567 #: build/C/man7/svipc.7:25
10573 #: build/C/man7/svipc.7:25
10576 msgstr "2009-01-26"
10578 #. type: Plain text
10579 #: build/C/man7/svipc.7:28
10580 msgid "svipc - System V interprocess communication mechanisms"
10581 msgstr "svipc - System V プロセス間通信機構"
10583 #. type: Plain text
10584 #: build/C/man7/svipc.7:35
10587 "B<#include E<lt>sys/types.hE<gt>>\n"
10588 "B<#include E<lt>sys/ipc.hE<gt>>\n"
10589 "B<#include E<lt>sys/msg.hE<gt>>\n"
10590 "B<#include E<lt>sys/sem.hE<gt>>\n"
10591 "B<#include E<lt>sys/shm.hE<gt>>\n"
10593 "B<#include E<lt>sys/types.hE<gt>>\n"
10594 "B<#include E<lt>sys/ipc.hE<gt>>\n"
10595 "B<#include E<lt>sys/msg.hE<gt>>\n"
10596 "B<#include E<lt>sys/sem.hE<gt>>\n"
10597 "B<#include E<lt>sys/shm.hE<gt>>\n"
10599 #. type: Plain text
10600 #: build/C/man7/svipc.7:43
10602 "This manual page refers to the Linux implementation of the System V "
10603 "interprocess communication (IPC) mechanisms: message queues, semaphore sets, "
10604 "and shared memory segments. In the following, the word I<resource> means an "
10605 "instantiation of one among such mechanisms."
10607 "このマニュアルページは System V プロセス間通信 (interprocess communication; "
10608 "IPC) 機構の Linux に おける実装を説明する。 このプロセス間通信機構には、 メッ"
10609 "セージキュー (message queue)、セマフォー集合 (semaphore set)、 共有メモリセグ"
10610 "メント (shared memory segment) などがある。以下で I<資源 (resource)> という用"
10611 "語を使用した場合にはこれらの機構のどれかを意味する。"
10614 #: build/C/man7/svipc.7:43
10616 msgid "Resource Access Permissions"
10617 msgstr "資源へのアクセス許可"
10619 #. type: Plain text
10620 #: build/C/man7/svipc.7:53
10622 "For each resource, the system uses a common structure of type I<struct "
10623 "ipc_perm> to store information needed in determining permissions to perform "
10624 "an IPC operation. The I<ipc_perm> structure, defined by the I<E<lt>sys/ipc."
10625 "hE<gt>> system header file, includes the following members:"
10627 "システムのそれぞれの資源は、IPC への操作を許可するかどうかを決定する ための情"
10628 "報を共通の構造体 I<struct ipc_perm> に格納して使用する。 I<ipc_perm> 構造体"
10629 "は、ヘッダーファイルの I<E<lt>sys/ipc.hE<gt>> に定義されており、以下のメン"
10632 #. type: Plain text
10633 #: build/C/man7/svipc.7:63
10636 "struct ipc_perm {\n"
10637 " uid_t cuid; /* creator user ID */\n"
10638 " gid_t cgid; /* creator group ID */\n"
10639 " uid_t uid; /* owner user ID */\n"
10640 " gid_t gid; /* owner group ID */\n"
10641 " unsigned short mode; /* r/w permissions */\n"
10644 "struct ipc_perm {\n"
10645 " uid_t cuid; /* 作成者のユーザーID */\n"
10646 " gid_t cgid; /* 作成者のグループID */\n"
10647 " uid_t uid; /* 所有者のユーザーID */\n"
10648 " gid_t gid; /* 所有者のグループID */\n"
10649 " unsigned short mode; /* 読み書きの許可 */\n"
10652 #. type: Plain text
10653 #: build/C/man7/svipc.7:73
10655 "The I<mode> member of the I<ipc_perm> structure defines, with its lower 9 "
10656 "bits, the access permissions to the resource for a process executing an IPC "
10657 "system call. The permissions are interpreted as follows:"
10659 "I<ipc_perm> 構造体の I<mode> メンバーは以下の 9 ビットで、プロセスの IPC シス"
10660 "テムコール による資源へのアクセス許可を定義する。 許可は以下のように解釈され"
10663 #. type: Plain text
10664 #: build/C/man7/svipc.7:77
10667 " 0400 Read by user.\n"
10668 " 0200 Write by user.\n"
10670 " 0400 ユーザーによる読み込み。\n"
10671 " 0200 ユーザーによる書き込み。\n"
10673 #. type: Plain text
10674 #: build/C/man7/svipc.7:80
10677 " 0040 Read by group.\n"
10678 " 0020 Write by group.\n"
10680 " 0040 グループによる読み込み。\n"
10681 " 0020 グループによる書き込み。\n"
10683 #. type: Plain text
10684 #: build/C/man7/svipc.7:83
10687 " 0004 Read by others.\n"
10688 " 0002 Write by others.\n"
10690 " 0004 他人による読み込み。\n"
10691 " 0002 他人による書き込み。\n"
10693 #. type: Plain text
10694 #: build/C/man7/svipc.7:91
10696 "Bits 0100, 0010, and 0001 (the execute bits) are unused by the system. "
10697 "Furthermore, \"write\" effectively means \"alter\" for a semaphore set."
10699 "システムはビット 0100, 0010, 0001 (実行ビット) は使用しない。 さらに、セマ"
10700 "フォーの場合には \"書き込み(write)\" は実際には \"変更(alter)\" を意味する。"
10702 #. type: Plain text
10703 #: build/C/man7/svipc.7:94
10705 "The same system header file also defines the following symbolic constants:"
10706 msgstr "同じヘッダーファイルには以下のシンボルの定義が含まれている:"
10709 #: build/C/man7/svipc.7:94
10711 msgid "B<IPC_CREAT>"
10712 msgstr "B<IPC_CREAT>"
10714 #. type: Plain text
10715 #: build/C/man7/svipc.7:97
10716 msgid "Create entry if key doesn't exist."
10717 msgstr "キー(key)が存在しない場合には新たなエントリを作成する。"
10720 #: build/C/man7/svipc.7:97
10722 msgid "B<IPC_EXCL>"
10723 msgstr "B<IPC_EXCL>"
10725 #. type: Plain text
10726 #: build/C/man7/svipc.7:100
10727 msgid "Fail if key exists."
10728 msgstr "キー(key)が存在する場合には失敗する。"
10731 #: build/C/man7/svipc.7:100
10733 msgid "B<IPC_NOWAIT>"
10734 msgstr "B<IPC_NOWAIT>"
10736 #. type: Plain text
10737 #: build/C/man7/svipc.7:103
10738 msgid "Error if request must wait."
10739 msgstr "要求が待たされる場合にはエラーになる。"
10742 #: build/C/man7/svipc.7:103
10744 msgid "B<IPC_PRIVATE>"
10745 msgstr "B<IPC_PRIVATE>"
10747 #. type: Plain text
10748 #: build/C/man7/svipc.7:106
10749 msgid "Private key."
10753 #: build/C/man7/svipc.7:106
10755 msgid "B<IPC_RMID>"
10756 msgstr "B<IPC_RMID>"
10758 #. type: Plain text
10759 #: build/C/man7/svipc.7:109
10760 msgid "Remove resource."
10764 #: build/C/man7/svipc.7:109
10767 msgstr "B<IPC_SET>"
10769 #. type: Plain text
10770 #: build/C/man7/svipc.7:112
10771 msgid "Set resource options."
10772 msgstr "資源にオプションを設定する。"
10775 #: build/C/man7/svipc.7:112
10777 msgid "B<IPC_STAT>"
10778 msgstr "B<IPC_STAT>"
10780 #. type: Plain text
10781 #: build/C/man7/svipc.7:115
10782 msgid "Get resource options."
10783 msgstr "資源のオプションを取得する。"
10785 #. type: Plain text
10786 #: build/C/man7/svipc.7:124
10788 "Note that B<IPC_PRIVATE> is a I<key_t> type, while all the other symbolic "
10789 "constants are flag fields and can be OR'ed into an I<int> type variable."
10791 "B<IPC_PRIVATE> は I<key_t> 型である。その他の全てのシンボルはフラグフィールド"
10792 "として I<int> 変数に OR 演算で格納することができる。"
10795 #: build/C/man7/svipc.7:124
10797 msgid "Message Queues"
10800 #. type: Plain text
10801 #: build/C/man7/svipc.7:132
10803 "A message queue is uniquely identified by a positive integer (its I<msqid>) "
10804 "and has an associated data structure of type I<struct msqid_ds>, defined in "
10805 "I<E<lt>sys/msg.hE<gt>>, containing the following members:"
10807 "メッセージキューは正の整数 (I<msqid>) によって識別され、 I<E<lt>sys/msg."
10808 "hE<gt>> に定義されている構造体 I<struct msqid_ds> に結びつけられている。 この"
10809 "構造体は以下のメンバーを含んでいる:"
10811 #. type: Plain text
10812 #: build/C/man7/svipc.7:145
10815 "struct msqid_ds {\n"
10816 " struct ipc_perm msg_perm;\n"
10817 " msgqnum_t msg_qnum; /* no of messages on queue */\n"
10818 " msglen_t msg_qbytes; /* bytes max on a queue */\n"
10819 " pid_t msg_lspid; /* PID of last msgsnd(2) call */\n"
10820 " pid_t msg_lrpid; /* PID of last msgrcv(2) call */\n"
10821 " time_t msg_stime; /* last msgsnd(2) time */\n"
10822 " time_t msg_rtime; /* last msgrcv(2) time */\n"
10823 " time_t msg_ctime; /* last change time */\n"
10826 "struct msqid_ds {\n"
10827 " struct ipc_perm msg_perm;\n"
10828 " msgqnum_t msg_qnum; /* キューにあるメッセージの数 */\n"
10829 " msglen_t msg_qbytes; /* キューの最大バイト数 */\n"
10830 " pid_t msg_lspid; /* 最後に msgsnd(2) をした PID */\n"
10831 " pid_t msg_lrpid; /* 最後に msgrcv(2) をした PID */\n"
10832 " time_t msg_stime; /* 最後に msgsnd(2) をした時間 */\n"
10833 " time_t msg_rtime; /* 最後に msgrcv(2) をした時間 */\n"
10834 " time_t msg_ctime; /* 最後に変更された時間 */\n"
10838 #: build/C/man7/svipc.7:147
10840 msgid "I<msg_perm>"
10841 msgstr "I<msg_perm>"
10843 #. type: Plain text
10844 #: build/C/man7/svipc.7:152
10846 "I<ipc_perm> structure that specifies the access permissions on the message "
10848 msgstr "メッセージキューへのアクセス許可を指定する I<ipc_perm> 構造体。"
10851 #: build/C/man7/svipc.7:152
10853 msgid "I<msg_qnum>"
10854 msgstr "I<msg_qnum>"
10856 #. type: Plain text
10857 #: build/C/man7/svipc.7:155
10858 msgid "Number of messages currently on the message queue."
10859 msgstr "現在、このメッセージキューにあるメッセージの数。"
10862 #: build/C/man7/svipc.7:155
10864 msgid "I<msg_qbytes>"
10865 msgstr "I<msg_qbytes>"
10867 #. type: Plain text
10868 #: build/C/man7/svipc.7:159
10869 msgid "Maximum number of bytes of message text allowed on the message queue."
10870 msgstr "メッセージキューに入れることができるメッセージの最大バイト数。"
10873 #: build/C/man7/svipc.7:159
10875 msgid "I<msg_lspid>"
10876 msgstr "I<msg_lspid>"
10878 #. type: Plain text
10879 #: build/C/man7/svipc.7:164
10880 msgid "ID of the process that performed the last B<msgsnd>(2) system call."
10881 msgstr "最後に B<msgsnd>(2) システムコールを行なったプロセスの ID。"
10884 #: build/C/man7/svipc.7:164
10886 msgid "I<msg_lrpid>"
10887 msgstr "I<msg_lrpid>"
10889 #. type: Plain text
10890 #: build/C/man7/svipc.7:169
10891 msgid "ID of the process that performed the last B<msgrcv>(2) system call."
10892 msgstr "最後に B<msgrcv>(2) システムコールを行なったプロセスの ID。"
10895 #: build/C/man7/svipc.7:169
10897 msgid "I<msg_stime>"
10898 msgstr "I<msg_stime>"
10900 #. type: Plain text
10901 #: build/C/man7/svipc.7:174
10902 msgid "Time of the last B<msgsnd>(2) system call."
10903 msgstr "最後に B<msgsnd>(2) システムコールを行なった時間。"
10906 #: build/C/man7/svipc.7:174
10908 msgid "I<msg_rtime>"
10909 msgstr "I<msg_rtime>"
10911 #. type: Plain text
10912 #: build/C/man7/svipc.7:179
10913 msgid "Time of the last B<msgrcv>(2) system call."
10914 msgstr "最後に B<msgrcv>(2) を行なった時間。"
10917 #: build/C/man7/svipc.7:179
10919 msgid "I<msg_ctime>"
10920 msgstr "I<msg_ctime>"
10922 #. type: Plain text
10923 #: build/C/man7/svipc.7:185
10925 "Time of the last system call that changed a member of the I<msqid_ds> "
10927 msgstr "最後に I<msqid_ds> 構造体のメンバーが変更された時間。"
10930 #: build/C/man7/svipc.7:185
10932 msgid "Semaphore Sets"
10935 #. type: Plain text
10936 #: build/C/man7/svipc.7:193
10938 "A semaphore set is uniquely identified by a positive integer (its I<semid>) "
10939 "and has an associated data structure of type I<struct semid_ds>, defined in "
10940 "I<E<lt>sys/sem.hE<gt>>, containing the following members:"
10942 "セマフォー集合は正の整数 (I<semid>) によって識別され、 I<E<lt>sys/sem."
10943 "hE<gt>> に定義されている構造体 I<struct semid_ds> に結びつけられている。 この"
10944 "構造体は以下のメンバーを含んでいる:"
10946 #. type: Plain text
10947 #: build/C/man7/svipc.7:202
10950 "struct semid_ds {\n"
10951 " struct ipc_perm sem_perm;\n"
10952 " time_t sem_otime; /* last operation time */\n"
10953 " time_t sem_ctime; /* last change time */\n"
10954 " unsigned long sem_nsems; /* count of sems in set */\n"
10957 "struct semid_ds {\n"
10958 " struct ipc_perm sem_perm;\n"
10959 " time_t sem_otime; /* 最後に操作した時間 */\n"
10960 " time_t sem_ctime; /* 最後に変更した時間 */\n"
10961 " unsigned long sem_nsems; /* 集合の中にあるセマフォー数 */\n"
10965 #: build/C/man7/svipc.7:204
10967 msgid "I<sem_perm>"
10968 msgstr "I<sem_perm>"
10970 #. type: Plain text
10971 #: build/C/man7/svipc.7:209
10973 "I<ipc_perm> structure that specifies the access permissions on the semaphore "
10975 msgstr "セマフォー集合へのアクセス許可を指定する I<ipc_perm> 構造体。"
10978 #: build/C/man7/svipc.7:209
10980 msgid "I<sem_otime>"
10981 msgstr "I<sem_otime>"
10983 #. type: Plain text
10984 #: build/C/man7/svipc.7:214
10985 msgid "Time of last B<semop>(2) system call."
10986 msgstr "最後に B<semop>(2) システムコールを行なった時間。"
10989 #: build/C/man7/svipc.7:214
10991 msgid "I<sem_ctime>"
10992 msgstr "I<sem_ctime>"
10994 #. type: Plain text
10995 #: build/C/man7/svipc.7:220
10997 "Time of last B<semctl>(2) system call that changed a member of the above "
10998 "structure or of one semaphore belonging to the set."
11000 "最後に B<semctl>(2) を行なって上記の構造体のメンバーを変更するか、セマフォー"
11001 "集合に属する セマフォーを変更した時間。"
11004 #: build/C/man7/svipc.7:220
11006 msgid "I<sem_nsems>"
11007 msgstr "I<sem_nsems>"
11009 #. type: Plain text
11010 #: build/C/man7/svipc.7:228
11012 "Number of semaphores in the set. Each semaphore of the set is referenced by "
11013 "a nonnegative integer ranging from B<0> to I<sem_nsems-1>."
11015 "セマフォー集合の中にあるセマフォーの数。 集合の中にあるそれぞれのセマフォーは"
11016 "負でない整数によって参照され、 B<0> から I<sem_nsems-1> までの番号を持つ。"
11018 #. type: Plain text
11019 #: build/C/man7/svipc.7:232
11021 "A semaphore is a data structure of type I<struct sem> containing the "
11022 "following members:"
11024 "セマフォーは I<struct sem> 型のデータ構造体であり、以下のメンバーを含んでい"
11027 #. unsigned short semncnt; /* nr awaiting semval to increase */
11028 #. unsigned short semzcnt; /* nr awaiting semval = 0 */
11029 #. type: Plain text
11030 #: build/C/man7/svipc.7:241
11034 " int semval; /* semaphore value */\n"
11035 " int sempid; /* PID for last operation */\n"
11039 " int semval; /* セマフォーの値 */\n"
11040 " int sempid; /* 最後に操作したプロセス ID */\n"
11044 #: build/C/man7/svipc.7:243
11049 #. type: Plain text
11050 #: build/C/man7/svipc.7:246
11051 msgid "Semaphore value: a nonnegative integer."
11052 msgstr "セマフォー値: 負でない整数。"
11055 #: build/C/man7/svipc.7:246
11062 #. Number of processes suspended awaiting for
11067 #. Number of processes suspended awaiting for
11070 #. type: Plain text
11071 #: build/C/man7/svipc.7:260
11073 "ID of the last process that performed a semaphore operation on this "
11075 msgstr "このセマフォーを最後に操作したプロセスの ID。"
11078 #: build/C/man7/svipc.7:260
11080 msgid "Shared Memory Segments"
11081 msgstr "共有メモリセグメント"
11083 #. type: Plain text
11084 #: build/C/man7/svipc.7:268
11086 "A shared memory segment is uniquely identified by a positive integer (its "
11087 "I<shmid>) and has an associated data structure of type I<struct shmid_ds>, "
11088 "defined in I<E<lt>sys/shm.hE<gt>>, containing the following members:"
11090 "共有メモリセグメントは正の整数 (I<shmid>) によって識別され、 I<E<lt>sys/shm."
11091 "hE<gt>> に定義されている I<struct shmid_ds> 構造体に結びつけられている。 この"
11092 "構造体は以下のメンバーを含んでいる:"
11094 #. type: Plain text
11095 #: build/C/man7/svipc.7:281
11098 "struct shmid_ds {\n"
11099 " struct ipc_perm shm_perm;\n"
11100 " size_t shm_segsz; /* size of segment */\n"
11101 " pid_t shm_cpid; /* PID of creator */\n"
11102 " pid_t shm_lpid; /* PID, last operation */\n"
11103 " shmatt_t shm_nattch; /* no. of current attaches */\n"
11104 " time_t shm_atime; /* time of last attach */\n"
11105 " time_t shm_dtime; /* time of last detach */\n"
11106 " time_t shm_ctime; /* time of last change */\n"
11109 "struct shmid_ds {\n"
11110 " struct ipc_perm shm_perm;\n"
11111 " size_t shm_segsz; /* セグメントのサイズ */\n"
11112 " pid_t shm_cpid; /* 作成者のプロセス ID */\n"
11113 " pid_t shm_lpid; /* 最後に操作したプロセス ID */\n"
11114 " shmatt_t shm_nattch; /* 現在、付加している数 */\n"
11115 " time_t shm_atime; /* 最後に付加した時間 */\n"
11116 " time_t shm_dtime; /* 最後に分離した時間 */\n"
11117 " time_t shm_ctime; /* 最後に変更した時間 */\n"
11121 #: build/C/man7/svipc.7:283
11123 msgid "I<shm_perm>"
11124 msgstr "I<shm_perm>"
11126 #. type: Plain text
11127 #: build/C/man7/svipc.7:288
11129 "I<ipc_perm> structure that specifies the access permissions on the shared "
11131 msgstr "共有メモリセグメントへのアクセス許可を指定した I<ipc_perm> 構造体。"
11134 #: build/C/man7/svipc.7:288
11136 msgid "I<shm_segsz>"
11137 msgstr "I<shm_segsz>"
11139 #. type: Plain text
11140 #: build/C/man7/svipc.7:291
11141 msgid "Size in bytes of the shared memory segment."
11142 msgstr "共有メモリセグメントのバイト数。"
11145 #: build/C/man7/svipc.7:291
11147 msgid "I<shm_cpid>"
11148 msgstr "I<shm_cpid>"
11150 #. type: Plain text
11151 #: build/C/man7/svipc.7:294
11152 msgid "ID of the process that created the shared memory segment."
11153 msgstr "共有メモリセグメントを作成したプロセスの ID。"
11156 #: build/C/man7/svipc.7:294
11158 msgid "I<shm_lpid>"
11159 msgstr "I<shm_lpid>"
11161 #. type: Plain text
11162 #: build/C/man7/svipc.7:301
11164 "ID of the last process that executed a B<shmat>(2) or B<shmdt>(2) system "
11167 "最後に B<shmat>(2) または B<shmdt>(2) システムコールを実行したプロセスの "
11171 #: build/C/man7/svipc.7:301
11173 msgid "I<shm_nattch>"
11174 msgstr "I<shm_nattch>"
11176 #. type: Plain text
11177 #: build/C/man7/svipc.7:304
11178 msgid "Number of current alive attaches for this shared memory segment."
11179 msgstr "この共有メモリセグメントをメモリに付加 (attach) しているプロセスの数。"
11182 #: build/C/man7/svipc.7:304
11184 msgid "I<shm_atime>"
11185 msgstr "I<shm_atime>"
11187 #. type: Plain text
11188 #: build/C/man7/svipc.7:309
11189 msgid "Time of the last B<shmat>(2) system call."
11190 msgstr "最後に B<shmat>(2) システムコールを行なった時間。"
11193 #: build/C/man7/svipc.7:309
11195 msgid "I<shm_dtime>"
11196 msgstr "I<shm_dtime>"
11198 #. type: Plain text
11199 #: build/C/man7/svipc.7:314
11200 msgid "Time of the last B<shmdt>(2) system call."
11201 msgstr "最後に B<shmdt>(2) システムコールを行なった時間。"
11204 #: build/C/man7/svipc.7:314
11206 msgid "I<shm_ctime>"
11207 msgstr "I<shm_ctime>"
11209 #. type: Plain text
11210 #: build/C/man7/svipc.7:320
11211 msgid "Time of the last B<shmctl>(2) system call that changed I<shmid_ds>."
11213 "最後に B<shmctl>(2) システムコールを行なって、 I<shmid_ds> 構造体を変更した"
11216 #. type: Plain text
11217 #: build/C/man7/svipc.7:334
11219 "B<ipc>(2), B<msgctl>(2), B<msgget>(2), B<msgrcv>(2), B<msgsnd>(2), B<semctl>"
11220 "(2), B<semget>(2), B<semop>(2), B<shmat>(2), B<shmctl>(2), B<shmdt>(2), "
11221 "B<shmget>(2), B<ftok>(3)"
11223 "B<ipc>(2), B<msgctl>(2), B<msgget>(2), B<msgrcv>(2), B<msgsnd>(2), B<semctl>"
11224 "(2), B<semget>(2), B<semop>(2), B<shmat>(2), B<shmctl>(2), B<shmdt>(2), "
11225 "B<shmget>(2), B<ftok>(3)"
11228 #: build/C/man3/ulimit.3:27
11234 #: build/C/man3/ulimit.3:27
11237 msgstr "2008-08-06"
11239 #. type: Plain text
11240 #: build/C/man3/ulimit.3:30
11241 msgid "ulimit - get and set user limits"
11242 msgstr "ulimit - ユーザー制限を取得・設定する"
11244 #. type: Plain text
11245 #: build/C/man3/ulimit.3:32
11246 msgid "B<#include E<lt>ulimit.hE<gt>>"
11247 msgstr "B<#include E<lt>ulimit.hE<gt>>"
11249 #. type: Plain text
11250 #: build/C/man3/ulimit.3:34
11251 msgid "B<long ulimit(int >I<cmd>B<, long >I<newlimit>B<);>"
11252 msgstr "B<long ulimit(int >I<cmd>B<, long >I<newlimit>B<);>"
11254 #. type: Plain text
11255 #: build/C/man3/ulimit.3:46
11257 "Warning: This routine is obsolete. Use B<getrlimit>(2), B<setrlimit>(2), "
11258 "and B<sysconf>(3) instead. For the shell command B<ulimit>(), see B<bash>"
11261 "注意: このルーチンは古い。 代わりに B<getrlimit>(2), B<setrlimit>(2), "
11262 "B<sysconf>(3) などを用いること。 シェルコマンドとしての B<ulimit>() につい"
11263 "ては、 B<bash>(1) を見ること。"
11265 #. type: Plain text
11266 #: build/C/man3/ulimit.3:53
11268 "The B<ulimit>() call will get or set some limit for the calling process. "
11269 "The I<cmd> argument can have one of the following values."
11271 "B<ulimit>() は呼び出し元のプロセスに関する制限のいくつかを取得・設定する。 "
11272 "I<cmd> 引き数には、以下の値のうちのどれか一つを与えることができる。"
11275 #: build/C/man3/ulimit.3:53
11277 msgid "B<UL_GETFSIZE>"
11278 msgstr "B<UL_GETFSIZE>"
11280 #. type: Plain text
11281 #: build/C/man3/ulimit.3:56
11282 msgid "Return the limit on the size of a file, in units of 512 bytes."
11283 msgstr "ファイルサイズに関する制限を返す。単位は 512 バイト。"
11286 #: build/C/man3/ulimit.3:56
11288 msgid "B<UL_SETFSIZE>"
11289 msgstr "B<UL_SETFSIZE>"
11291 #. type: Plain text
11292 #: build/C/man3/ulimit.3:59
11293 msgid "Set the limit on the size of a file."
11294 msgstr "ファイルサイズに関する制限を設定する。"
11297 #: build/C/man3/ulimit.3:59
11302 #. type: Plain text
11303 #: build/C/man3/ulimit.3:63
11305 "(Not implemented for Linux.) Return the maximum possible address of the "
11308 "(Linux では実装されていない) データセグメントで指定できるアドレスの最大値を"
11312 #: build/C/man3/ulimit.3:63
11317 #. type: Plain text
11318 #: build/C/man3/ulimit.3:67
11320 "(Implemented but no symbolic constant provided.) Return the maximum number "
11321 "of files that the calling process can open."
11323 "(実装されているが、対応するシンボリックな定数は存在しない) プロセスがオープ"
11324 "ンできるファイル数の最大値を返す。"
11326 #. type: Plain text
11327 #: build/C/man3/ulimit.3:74
11329 "On success, B<ulimit>() returns a nonnegative value. On error, -1 is "
11330 "returned, and I<errno> is set appropriately."
11332 "成功すると B<ulimit>() は 0 または正の値を返す。 エラーが生じると -1 を返"
11333 "し、 I<errno> を適切な値に設定する。"
11335 #. type: Plain text
11336 #: build/C/man3/ulimit.3:78
11337 msgid "A unprivileged process tried to increase a limit."
11338 msgstr "非特権プロセスが制限値を増加させようとした。"
11340 #. type: Plain text
11341 #: build/C/man3/ulimit.3:83
11342 msgid "SVr4, POSIX.1-2001. POSIX.1-2008 marks B<ulimit>() as obsolete."
11344 "SVr4, POSIX.1-2001. POSIX.1-2008 は B<ulimit>() を廃止予定としている。"
11346 #. type: Plain text
11347 #: build/C/man3/ulimit.3:88
11348 msgid "B<bash>(1), B<getrlimit>(2), B<setrlimit>(2), B<sysconf>(3)"
11349 msgstr "B<bash>(1), B<getrlimit>(2), B<setrlimit>(2), B<sysconf>(3)"
11352 #~ "Perform various network-related operations (e.g., setting privileged "
11353 #~ "socket options, enabling multicasting, interface configuration, modifying "
11354 #~ "routing tables)."
11356 #~ "各種のネットワーク関連の操作を実行する。 (例えば、特権が必要なソケットオプ"
11357 #~ "ションを設定する、マルチキャストを有効にする、 インターフェースを設定す"
11358 #~ "る、ルーティングテーブルを変更するなど)"
11360 #~ msgid "Use B<vhangup>(2)."
11361 #~ msgstr "B<vhangup>(2) を呼び出す。"
11363 #~ msgid "I<rlim> points outside the accessible address space."
11364 #~ msgstr "I<rlim> がアクセス可能なアドレス空間の外を指している。"
11367 #~ "The structure definition shown at the start of this page was taken from "
11368 #~ "4.3BSD Reno. Not all fields are meaningful under Linux. In Linux 2.4 "
11369 #~ "only the fields I<ru_utime>, I<ru_stime>, I<ru_minflt>, and I<ru_majflt> "
11370 #~ "are maintained. Since Linux 2.6, I<ru_nvcsw> and I<ru_nivcsw> are also "
11371 #~ "maintained. Since Linux 2.6.22, I<ru_inblock> and I<ru_oublock> are also "
11374 #~ "このページの最初で示した構造体の定義は 4.3BSD Reno のものを採用した。 "
11375 #~ "Linux では全てのフィールドが意味を持つというわけではない。 Linux 2.4 で"
11376 #~ "は、フィールド I<ru_utime>, I<ru_stime>, I<ru_minflt>, I<ru_majflt> のみが"
11377 #~ "メンテナンスされている。 Linux 2.6 以降では I<ru_nvcsw>, I<ru_nivcsw> もメ"
11378 #~ "ンテナンスされている。 Linux 2.6.22 以降では I<ru_inblock>, I<ru_oublock> "
11381 #~ msgid "Linux Notes"
11382 #~ msgstr "Linux での注意"