This causes an issue when using glib's gspawn APIs under libseccomp on
impish. It uses close_range to set CLOEXEC on some open file descriptors
and rightfully checks for ENOSYS. However, since seccomp doesn't know
about the syscall that becomes EPERM and it skips setting CLOEXEC
assuming there was
Public bug reported:
A few changes for gspawn landed in the 2.67 series that had some bugs
which were later fixed and backported to 2.70 as seen in
https://gitlab.gnome.org/GNOME/glib/-/merge_requests/2394. These bugs
are present in 2.68 as on impish, but that series won't see any more
updates
2 matches
Mail list logo
