I noticed while reading seccomp(2) today that the example code still uses SECCOMP_RET_KILL. This is unsafe in a multithreaded process and should be considered deprecated -- having a thread asynchronously cease to exist inherently leaves the process in a permanently inconsistent and possibly corrupt state. The example should be updated to use SECCOMP_RET_KILL_PROCESS and a note that SECCOMP_RET_KILL[_THREAD] is unsafe and deprecated should probably be added as well. Rich
