core.5: Reorder a bullet list

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

man5/core.5

@@ -249,11 +249,11 @@ The program must be specified using an absolute pathname (or a
 pathname relative to the root directory, \fI/\fP),
 and must immediately follow the '|' character.
 .IP *
-The program pathname is interpreted with respect to the initial mount namespace
-as it is always executed there.
-It is not affected by the settings
-(e.g., root directory, mount namespace, current working directory)
-of the crashing process.
+The command-line arguments can include any of
+the % specifiers listed above.
+For example, to pass the PID of the process that is being dumped, specify
+.I %p
+in an argument.
 .IP *
 The process created to run the program runs as user and group
 .IR root .
@@ -265,6 +265,12 @@ Namely, LSMs (e.g., SELinux) are still active and may prevent the handler
 from accessing details about the crashed process via
 .IR /proc/[pid] .
 .IP *
+The program pathname is interpreted with respect to the initial mount namespace
+as it is always executed there.
+It is not affected by the settings
+(e.g., root directory, mount namespace, current working directory)
+of the crashing process.
+.IP *
 The process runs in the initial namespaces
 (PID, mount, user, and so on)
 and not in the namespaces of the crashing process.
@@ -285,12 +291,6 @@ specifier to change to the location of the dumping process via
 Command-line arguments can be supplied to the
 program (since Linux 2.6.24),
 delimited by white space (up to a total line length of 128 bytes).
-.IP *
-The command-line arguments can include any of
-the % specifiers listed above.
-For example, to pass the PID of the process that is being dumped, specify
-.I %p
-in an argument.
 .\"
 .SS /proc/sys/kernel/core_pipe_limit
 When collecting core dumps via a pipe to a user-space program,