Say a bit about default value in setting description.

This commit is contained in:
Ben Radford 2023-07-11 11:24:11 +01:00
parent a193ec4052
commit b8e8dfc3e8
No known key found for this signature in database
GPG key ID: 9DF5D4640AB888D5

View file

@ -536,6 +536,10 @@ public:
If you encounter such a failure, setting this option to `false` will let you ignore it and continue.
But before doing so, you should consider the security implications carefully.
Not dropping supplementary groups means the build sandbox will be less restricted than intended.
This option defaults to `true` when the user is root
(since root usually has permissions to call setgroups)
and `false` otherwise.
)"};
#if __linux__