From cb453c80f4b282b37801b832363f8a0fa7098f4d Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Thu, 9 Nov 2017 12:50:18 +0100 Subject: [PATCH] seccomp.2: srcfix Signed-off-by: Michael Kerrisk --- man2/seccomp.2 | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/man2/seccomp.2 b/man2/seccomp.2 index a99c26259..864262fef 100644 --- a/man2/seccomp.2 +++ b/man2/seccomp.2 @@ -352,8 +352,9 @@ even if one of the earlier filters returns This is done to simplify the kernel code and to provide a tiny speed-up in the execution of sets of filters by avoiding a check for this uncommon case.) -.\" From an Aug 2015 conversation with Kees Cook where I asked why *all* -.\" filters even if one of the early filters returns SECCOMP_RET_KILL: +.\" From an Aug 2015 conversation with Kees Cook where I asked why *all* +.\" filters are applied even if one of the early filters returns +.\" SECCOMP_RET_KILL: .\" .\" It's just because it would be an optimization that would only speed up .\" the RET_KILL case, but it's the uncommon one and the one that doesn't