--- man-pages-2.54/man5/proc.5 2007-05-16 11:25:50.000000000 -0700 +++ man-pages-2.54/man5/proc.5.new 2007-06-09 10:23:22.000000000 -0700 @@ -274,8 +410,18 @@ are not available if the main thread has already terminated (typically by calling .BR pthread_exit (3)). -.\" FIXME Describe /proc/[number]/seccomp -.\" Added in 2.6.12 +.TP +.IR /proc/[number]/seccomp " (since Linux 2.6.12)" +Secure computing mode 1 only allows the process [number] to +.BR read (2), +.BR write (2), +.BR exit (2), +and +.BR sigreturn (2). +Using +.BR setrlimit (2) +to limit stack allocations is recommended for security. +It is impossible to disable once enabled. .TP .IR /proc/[number]/smaps " (since Linux 2.6.14)" This file shows memory consumption for each of the process's mappings.