xz: Landlock: Fix a file descriptor leak

(cherry picked from commit 48ff3f06521ca326996ab9a04d1b342098960427)

diff --git a/src/xz/sandbox.c b/src/xz/sandbox.c
index 5bd2273707519b7f638a2d158e28ea6848f7fcfb..5a12f69b65823eb62110dc81bf32df7b363acba6 100644 (file)
--- a/src/xz/sandbox.c
+++ b/src/xz/sandbox.c
@@ -196,6 +196,7 @@ enable_landlock(uint64_t required_rights)
        if (syscall(SYS_landlock_restrict_self, ruleset_fd, 0U) != 0)
                message_fatal(_("Failed to enable the sandbox"));
 
+       (void)close(ruleset_fd);
        return;
 }