From 7d596c7b1b88a13c02783962ffd9b093a0e94538 Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Sun, 2 Nov 2014 09:43:23 +0100 Subject: [PATCH] seccomp.2: Minor rewording Signed-off-by: Michael Kerrisk --- man2/seccomp.2 | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/man2/seccomp.2 b/man2/seccomp.2 index 8ce1457ae..9bc995829 100644 --- a/man2/seccomp.2 +++ b/man2/seccomp.2 @@ -117,12 +117,12 @@ in This requirement ensures that filter programs cannot be applied to child processes with greater privileges than the process that installed them. -Additionally, if +If .BR prctl (2) or .BR seccomp (2) -is allowed by the attached filter, additional filters may be layered on -which will increase evaluation time, but allow for further reduction of +is allowed by the attached filter, further filters may be added. +This will increase evaluation time, but allow for further reduction of the attack surface during execution of a process. The