Chris Down writes:
sigprocmask() only returns an error if you pass an invalid first argument, but we're using SIG_SETMASK as part of the userspace ABI contract, so that doesn't seem very relevant.
(One could make the same argument about sigaction(), of course -- that's mostly just an EINTR habit.)