Ophestra ac34635890 container: set FD_CLOEXEC on all open files ...

While fd created from this side always has the FD_CLOEXEC flag, the same is not true for files left open by the parent. This change prevents those files from leaking into the container.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-11-12 00:18:29 +09:00

23 KiB

Raw Blame History

View Raw