From: Michael Kerrisk Date: Sat, 26 Sep 2020 13:40:56 +0000 (+0200) Subject: seccomp.2: Reorder list of SECCOMP_SET_MODE_FILTER flags alphabetically X-Git-Tag: man-pages-5.12~88 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8fa47f3ae4c54299f67ba919335b9d0fb262393d;p=thirdparty%2Fman-pages.git seccomp.2: Reorder list of SECCOMP_SET_MODE_FILTER flags alphabetically (No content changes.) Signed-off-by: Michael Kerrisk --- diff --git a/man2/seccomp.2 b/man2/seccomp.2 index 9f729a7289..800c90aeec 100644 --- a/man2/seccomp.2 +++ b/man2/seccomp.2 @@ -207,6 +207,20 @@ The recognized are: .RS .TP +.BR SECCOMP_FILTER_FLAG_LOG " (since Linux 4.14)" +.\" commit e66a39977985b1e69e17c4042cb290768eca9b02 +All filter return actions except +.BR SECCOMP_RET_ALLOW +should be logged. +An administrator may override this filter flag by preventing specific +actions from being logged via the +.IR /proc/sys/kernel/seccomp/actions_logged +file. +.TP +.BR SECCOMP_FILTER_FLAG_SPEC_ALLOW " (since Linux 4.17)" +.\" commit 00a02d0c502a06d15e07b857f8ff921e3e402675 +Disable Speculative Store Bypass mitigation. +.TP .BR SECCOMP_FILTER_FLAG_TSYNC When adding a new filter, synchronize all other threads of the calling process to the same seccomp filter tree. @@ -222,20 +236,6 @@ Synchronization will fail if another thread in the same process is in .BR SECCOMP_MODE_STRICT or if it has attached new seccomp filters to itself, diverging from the calling thread's filter tree. -.TP -.BR SECCOMP_FILTER_FLAG_LOG " (since Linux 4.14)" -.\" commit e66a39977985b1e69e17c4042cb290768eca9b02 -All filter return actions except -.BR SECCOMP_RET_ALLOW -should be logged. -An administrator may override this filter flag by preventing specific -actions from being logged via the -.IR /proc/sys/kernel/seccomp/actions_logged -file. -.TP -.BR SECCOMP_FILTER_FLAG_SPEC_ALLOW " (since Linux 4.17)" -.\" commit 00a02d0c502a06d15e07b857f8ff921e3e402675 -Disable Speculative Store Bypass mitigation. .RE .TP .BR SECCOMP_GET_ACTION_AVAIL " (since Linux 4.14)"