From: Michael Kerrisk <mtk.manpages@gmail.com>
Date: Sat, 26 Sep 2020 20:48:44 +0000 (+0200)
Subject: seccomp.2: Add some details for SECCOMP_FILTER_FLAG_NEW_LISTENER
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=85e621b77fc2ee9a76d09b2ae5a42e8da02f5664;p=thirdparty%2Fman-pages.git

seccomp.2: Add some details for SECCOMP_FILTER_FLAG_NEW_LISTENER

Rework the description a little, and note that the close-on-exec
flag is set for the returned file descriptor.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
---

diff --git a/man2/seccomp.2 b/man2/seccomp.2
index 9721b4463c..c04d2c33ea 100644
--- a/man2/seccomp.2
+++ b/man2/seccomp.2
@@ -216,8 +216,9 @@ file.
 .TP
 .BR SECCOMP_FILTER_FLAG_NEW_LISTENER " (since Linux 5.0)"
 .\" commit 6a21cc50f0c7f87dae5259f6cfefe024412313f6
-With this flag,
-a new user-space notification file descriptor is returned on success.
+After successfully installing the filter program,
+return a new user-space notification file descriptor.
+(The close-on-exec flag is set for the file descriptor.)
 When the filter returns
 .BR SECCOMP_RET_USER_NOTIF
 a notification will be sent to this file descriptor.