container/syscall_range_proc.go


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

//go:build !close_range

package container

import (
	"os"
	"strconv"
	"syscall"

	"hakurei.app/fhs"
)

// doCloseOnExec implements ensureCloseOnExec by ranging over proc_pid_fd(5).
func doCloseOnExec() error {
	entries, err := os.ReadDir(fhs.ProcSelf + "fd/")
	if err != nil {
		return err
	}

	var fd int
	for _, ent := range entries {
		if fd, err = strconv.Atoi(ent.Name()); err != nil {
			return err // not reached
		}
		syscall.CloseOnExec(fd)
	}
	return nil
}