config-linux.md: formalize the order of seccomp.syscalls

Corresponds to the behavior of existing implementations such as runc Co-authored-by: Sebastiaan van Stijn <[email protected]> Signed-off-by: Akihiro Suda <[email protected]>
opencontainers · Sep 3, 2022 · 7fe7f3a · 7fe7f3a
1 parent 901acb9
commit 7fe7f3a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/config-linux.md b/config-linux.md
@@ -759,6 +759,11 @@ The following parameters can be specified to set up seccomp:
  * `SCMP_CMP_GT`
  * `SCMP_CMP_MASKED_EQ`
 
+ Syscalls in this list are not guaranteed to be unique, and MAY appear multiple
+ times. If a syscall appears multiple times, runtimes MUST use the first match,
+ and MUST ignore further occurrences. Runtimes MAY log a warning if duplicate entries
+ are present.
+
 ### Example
 
 ```json