fallocate.2, mmap.2, open.2, truncate.2, write.2: ERRORS: add EPERM for operation denied by file seal

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>

man2/fallocate.2

@@ -349,6 +349,10 @@ is marked append-only
 (see
 .BR chattr (1)).
 .TP
+.B EPERM
+The operation was prevented by a file seal; see
+.BR fcntl (2).
+.TP
 .B ESPIPE
 .I fd
 refers to a pipe or FIFO.

man2/mmap.2

@@ -465,6 +465,10 @@ but the mapped area belongs to a file on a filesystem that
 was mounted no-exec.
 .\" (Since 2.4.25 / 2.6.0.)
 .TP
+.B EPERM
+The operation was prevented by a file seal; see
+.BR fcntl (2).
+.TP
 .B ETXTBSY
 .B MAP_DENYWRITE
 was set but the object specified by

man2/open.2

@@ -980,6 +980,10 @@ flag was specified, but the effective user ID of the caller
 did not match the owner of the file and the caller was not privileged
 .RB ( CAP_FOWNER ).
 .TP
+.B EPERM
+The operation was prevented by a file seal; see
+.BR fcntl (2).
+.TP
 .B EROFS
 .I pathname
 refers to a file on a read-only filesystem and write access was

man2/truncate.2

@@ -169,6 +169,10 @@ A component of the path prefix is not a directory.
 The underlying filesystem does not support extending
 a file beyond its current size.
 .TP
+.B EPERM
+The operation was prevented by a file seal; see
+.BR fcntl (2).
+.TP
 .B EROFS
 The named file resides on a read-only filesystem.
 .TP

man2/write.2

@@ -171,6 +171,10 @@ The device containing the file referred to by
 .I fd
 has no room for the data.
 .TP
+.B EPERM
+The operation was prevented by a file seal; see
+.BR fcntl (2).
+.TP
 .B EPIPE
 .I fd
 is connected to a pipe or socket whose reading end is closed.