From: Michael Kerrisk Date: Sat, 26 Sep 2020 13:40:56 +0000 (+0200) Subject: seccomp.2: Reorder list of SECCOMP_SET_MODE_FILTER flags alphabetically X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4ca8558bf361888cd8fd3be4307ae566a22ffc54;p=thirdparty%2Fman-pages.git seccomp.2: Reorder list of SECCOMP_SET_MODE_FILTER flags alphabetically (No content changes.) Signed-off-by: Michael Kerrisk --- diff --git a/man2/seccomp.2 b/man2/seccomp.2 index 5863811f88..a064e13566 100644 --- a/man2/seccomp.2 +++ b/man2/seccomp.2 @@ -204,6 +204,20 @@ The recognized are: .RS .TP +.BR SECCOMP_FILTER_FLAG_LOG " (since Linux 4.14)" +.\" commit e66a39977985b1e69e17c4042cb290768eca9b02 +All filter return actions except +.BR SECCOMP_RET_ALLOW +should be logged. +An administrator may override this filter flag by preventing specific +actions from being logged via the +.IR /proc/sys/kernel/seccomp/actions_logged +file. +.TP +.BR SECCOMP_FILTER_FLAG_SPEC_ALLOW " (since Linux 4.17)" +.\" commit 00a02d0c502a06d15e07b857f8ff921e3e402675 +Disable Speculative Store Bypass mitigation. +.TP .BR SECCOMP_FILTER_FLAG_TSYNC When adding a new filter, synchronize all other threads of the calling process to the same seccomp filter tree. @@ -219,20 +233,6 @@ Synchronization will fail if another thread in the same process is in .BR SECCOMP_MODE_STRICT or if it has attached new seccomp filters to itself, diverging from the calling thread's filter tree. -.TP -.BR SECCOMP_FILTER_FLAG_LOG " (since Linux 4.14)" -.\" commit e66a39977985b1e69e17c4042cb290768eca9b02 -All filter return actions except -.BR SECCOMP_RET_ALLOW -should be logged. -An administrator may override this filter flag by preventing specific -actions from being logged via the -.IR /proc/sys/kernel/seccomp/actions_logged -file. -.TP -.BR SECCOMP_FILTER_FLAG_SPEC_ALLOW " (since Linux 4.17)" -.\" commit 00a02d0c502a06d15e07b857f8ff921e3e402675 -Disable Speculative Store Bypass mitigation. .RE .TP .BR SECCOMP_GET_ACTION_AVAIL " (since Linux 4.14)"