hakurei/container/syscall_range_proc.go

//go:build !close_range

package container

import (
	"os"
	"strconv"
	"syscall"

	"hakurei.app/container/fhs"
)

// doCloseOnExec implements ensureCloseOnExec by ranging over proc_pid_fd(5).
func doCloseOnExec() error {
	entries, err := os.ReadDir(fhs.ProcSelf + "fd/")
	if err != nil {
		return err
	}

	var fd int
	for _, ent := range entries {
		if fd, err = strconv.Atoi(ent.Name()); err != nil {
			return err // not reached
		}
		syscall.CloseOnExec(fd)
	}
	return nil
}