mirror of https://github.com/mkerrisk/man-pages
seccomp.2: Reorder list of SECCOMP_SET_MODE_FILTER flags alphabetically
(No content changes.) Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
3bed246e7e
commit
8fa47f3ae4
|
@ -207,6 +207,20 @@ The recognized
|
|||
are:
|
||||
.RS
|
||||
.TP
|
||||
.BR SECCOMP_FILTER_FLAG_LOG " (since Linux 4.14)"
|
||||
.\" commit e66a39977985b1e69e17c4042cb290768eca9b02
|
||||
All filter return actions except
|
||||
.BR SECCOMP_RET_ALLOW
|
||||
should be logged.
|
||||
An administrator may override this filter flag by preventing specific
|
||||
actions from being logged via the
|
||||
.IR /proc/sys/kernel/seccomp/actions_logged
|
||||
file.
|
||||
.TP
|
||||
.BR SECCOMP_FILTER_FLAG_SPEC_ALLOW " (since Linux 4.17)"
|
||||
.\" commit 00a02d0c502a06d15e07b857f8ff921e3e402675
|
||||
Disable Speculative Store Bypass mitigation.
|
||||
.TP
|
||||
.BR SECCOMP_FILTER_FLAG_TSYNC
|
||||
When adding a new filter, synchronize all other threads of the calling
|
||||
process to the same seccomp filter tree.
|
||||
|
@ -222,20 +236,6 @@ Synchronization will fail if another thread in the same process is in
|
|||
.BR SECCOMP_MODE_STRICT
|
||||
or if it has attached new seccomp filters to itself,
|
||||
diverging from the calling thread's filter tree.
|
||||
.TP
|
||||
.BR SECCOMP_FILTER_FLAG_LOG " (since Linux 4.14)"
|
||||
.\" commit e66a39977985b1e69e17c4042cb290768eca9b02
|
||||
All filter return actions except
|
||||
.BR SECCOMP_RET_ALLOW
|
||||
should be logged.
|
||||
An administrator may override this filter flag by preventing specific
|
||||
actions from being logged via the
|
||||
.IR /proc/sys/kernel/seccomp/actions_logged
|
||||
file.
|
||||
.TP
|
||||
.BR SECCOMP_FILTER_FLAG_SPEC_ALLOW " (since Linux 4.17)"
|
||||
.\" commit 00a02d0c502a06d15e07b857f8ff921e3e402675
|
||||
Disable Speculative Store Bypass mitigation.
|
||||
.RE
|
||||
.TP
|
||||
.BR SECCOMP_GET_ACTION_AVAIL " (since Linux 4.14)"
|
||||
|
|
Loading…
Reference in New Issue