From: Christian Brauner <christian.brauner@ubuntu.com>
Date: Fri, 7 Jan 2022 12:42:33 +0000 (+0100)
Subject: seccomp: close seccomp notifier fd in cleanup handler
X-Git-Tag: lxc-5.0.0~44^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F4053%2Fhead;p=thirdparty%2Flxc.git

seccomp: close seccomp notifier fd in cleanup handler

Reported-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
---

diff --git a/src/lxc/seccomp.c b/src/lxc/seccomp.c
index 6c56b8d0f..5a725f677 100644
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -1373,6 +1373,7 @@ int seccomp_notify_cleanup_handler(int fd, void *data)
 	 * seccomp notify handler through the command socket (e.g. for attach)
 	 * and so we won't touch the container's config.
 	 */
+	close(fd);
 #endif
 	return 0;
 }