seccomp: close seccomp notifier fd in cleanup handler

Reported-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/seccomp.c b/src/lxc/seccomp.c
index 6c56b8d0fb2cb343df41c24f68c44e0100c5a62d..5a725f677bdad64a6722306fcdc9fbef017265bb 100644 (file)
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -1373,6 +1373,7 @@ int seccomp_notify_cleanup_handler(int fd, void *data)
         * seccomp notify handler through the command socket (e.g. for attach)
         * and so we won't touch the container's config.
         */
+       close(fd);
 #endif
        return 0;
 }