From 4ab9f1db3d3b04116c8dae9db8d0e60394cbe3c2 Mon Sep 17 00:00:00 2001
From: Michael Kerrisk <mtk.manpages@gmail.com>
Date: Fri, 16 Sep 2016 12:35:45 +0200
Subject: [PATCH] prctl.2: ERRORS: Add EACCES error for
 PR_SET_SECCOMP-SECCOMP_MODE_FILTER

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
---
 man2/prctl.2 | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/man2/prctl.2 b/man2/prctl.2
index a9bc420b5..e3645b8d0 100644
--- a/man2/prctl.2
+++ b/man2/prctl.2
@@ -1034,6 +1034,22 @@ is set appropriately.
 .B EACCES
 .I option
 is
+.BR PR_SET_SECCOMP
+and
+.I arg2
+is
+.BR SECCOMP_MODE_FILTER ,
+but the process does not have the
+.BR CAP_SYS_ADMIN
+capability or has not set the
+.IR no_new_privs
+attribute (see the discussion of
+.BR PR_SET_NO_NEW_PRIVS
+above).
+.TP
+.B EACCES
+.I option
+is
 .BR PR_SET_MM ,
 and
 .I arg3