Skip to contentSkip to conversation

seccomp.2: Clarify SECCOMP_RET_KILL kills tasks not processes

PATCH In review Kees Cook 2 participants 2 messages Jul 6, 2017 – Aug 15, 2017 Man-pages: manual pages for Linux -- Sections 2, 3, 4, 5, and 7

lore
Share & tools
lore

Kees Cook

author
#0 lore raw

PATCH 1/1 seccomp.2: Clarify SECCOMP_RET_KILL kills tasks not processes

Zach Reizner pointed out a mismatch between kernel behavior and the man-page documentation of SECCOMP_RET_KILL which kills tasks not processes.

---
 man2/seccomp.2 | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
man2/seccomp.2 +3 -3
index 7d0e721..b805154 100644
@@ -371,9 +371,9 @@ In decreasing order of precedence,
 the values that may be returned by a seccomp filter are:
 .TP
 .BR SECCOMP_RET_KILL
-This value results in the process exiting immediately
+This value results in the task exiting immediately
 without executing the system call.
-The process terminates as though killed by a
+The task terminates as though killed by a
 .B SIGSYS
 signal
 .RI ( not
@@ -769,7 +769,7 @@ install_filter(int syscall_nr, int t_arch, int f_errno)
                system calls */
         BPF_STMT(BPF_RET | BPF_K, SECCOMP_RET_ALLOW),
 
-        /* [7] Destination of architecture mismatch: kill process */
+        /* [7] Destination of architecture mismatch: kill task */
         BPF_STMT(BPF_RET | BPF_K, SECCOMP_RET_KILL),
     };
 
Signature · 10 lines
2.7.4


-- 
Kees Cook
Pixel Security
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
#1 lore raw
Quoted 3 lines · Kees Cook

Zach Reizner pointed out a mismatch between kernel behavior and the man-page documentation of SECCOMP_RET_KILL which kills tasks not processes.

Thanks, Kees. Applied.

Cheers,

Michael

Quoted 31 lines
---
 man2/seccomp.2 | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
man2/seccomp.2 +3 -3
index 7d0e721..b805154 100644
@@ -371,9 +371,9 @@ In decreasing order of precedence,
 the values that may be returned by a seccomp filter are:
 .TP
 .BR SECCOMP_RET_KILL
-This value results in the process exiting immediately
+This value results in the task exiting immediately
 without executing the system call.
-The process terminates as though killed by a
+The task terminates as though killed by a
 .B SIGSYS
 signal
 .RI ( not
@@ -769,7 +769,7 @@ install_filter(int syscall_nr, int t_arch, int f_errno)
                system calls */
         BPF_STMT(BPF_RET | BPF_K, SECCOMP_RET_ALLOW),
 
-        /* [7] Destination of architecture mismatch: kill process */
+        /* [7] Destination of architecture mismatch: kill task */
         BPF_STMT(BPF_RET | BPF_K, SECCOMP_RET_KILL),
     };
 
Signature · 7 lines
Michael Kerrisk
Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/
Linux/UNIX System Programming Training: http://man7.org/training/
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html