use unsigned bitmask for consistency in ksigaction