]> git.ipfire.org Git - thirdparty/mkosi.git/commit
sandbox: Rework ctypes hack 3899/head
authorDaan De Meyer <daan.j.demeyer@gmail.com>
Fri, 12 Sep 2025 10:59:34 +0000 (12:59 +0200)
committerDaan De Meyer <daan.j.demeyer@gmail.com>
Fri, 12 Sep 2025 11:55:25 +0000 (13:55 +0200)
commitbbf8d89ca0090bfce8803f57e86d6ea9edb4b809
treeae24e1fceec235203df5ef5862de60437e4780f8
parent3fa5c9e1cf72dbacdd722e4ba9877e1dcff0f3d8
sandbox: Rework ctypes hack

Now that libffi marks the trampoline file descriptor opened by ctypes
as O_CLOEXEC, we can move file descriptor packing to the very end of
setting up the sandbox and close all file descriptors marked with
O_CLOEXEC already which will also close the libffi trampoline file
descriptor.
mkosi/sandbox.py