diff --git a/man2/seccomp.2 b/man2/seccomp.2 index a99c26259..864262fef 100644 --- a/man2/seccomp.2 +++ b/man2/seccomp.2 @@ -352,8 +352,9 @@ even if one of the earlier filters returns This is done to simplify the kernel code and to provide a tiny speed-up in the execution of sets of filters by avoiding a check for this uncommon case.) -.\" From an Aug 2015 conversation with Kees Cook where I asked why *all* -.\" filters even if one of the early filters returns SECCOMP_RET_KILL: +.\" From an Aug 2015 conversation with Kees Cook where I asked why *all* +.\" filters are applied even if one of the early filters returns +.\" SECCOMP_RET_KILL: .\" .\" It's just because it would be an optimization that would only speed up .\" the RET_KILL case, but it's the uncommon one and the one that doesn't