seccomp.2: srcfix

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2017-11-09 12:50:18 +01:00
parent 5f96365397
commit cb453c80f4
1 changed files with 3 additions and 2 deletions

View File

@ -352,8 +352,9 @@ even if one of the earlier filters returns
This is done to simplify the kernel code and to provide a
tiny speed-up in the execution of sets of filters by
avoiding a check for this uncommon case.)
.\" From an Aug 2015 conversation with Kees Cook where I asked why *all*
.\" filters even if one of the early filters returns SECCOMP_RET_KILL:
.\" From an Aug 2015 conversation with Kees Cook where I asked why *all*
.\" filters are applied even if one of the early filters returns
.\" SECCOMP_RET_KILL:
.\"
.\" It's just because it would be an optimization that would only speed up
.\" the RET_KILL case, but it's the uncommon one and the one that doesn't