s6-linux-init has a suitable open file descriptor. It is its standard input, before it closes it to do the slashdev test.
Of course, but once the fd is closed, /dev/console should not have any impact on the process, so would a kbrequest still reach it? -- Laurent
