summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorDavid Lönnhager <david.l@mullvad.net>2026-01-27 16:00:22 +0100
committerDavid Lönnhager <david.l@mullvad.net>2026-01-27 16:00:22 +0100
commit0cabc40c65d0743b8098800b0fe88f1ca0f2bc8c (patch)
treecdfd124b4cd5fbc664fb62065d50dc5ea260b6d0
parent9de2679b7e71ce9e9f638c64e6d4ddb056d0a17b (diff)
downloadmullvadvpn-systemd-cgroup-v2-seccomp.tar.xz
mullvadvpn-systemd-cgroup-v2-seccomp.zip
-rw-r--r--mullvad-exclude/src/main.rs3
1 files changed, 3 insertions, 0 deletions
diff --git a/mullvad-exclude/src/main.rs b/mullvad-exclude/src/main.rs
index e2d9703587..49556ab3d7 100644
--- a/mullvad-exclude/src/main.rs
+++ b/mullvad-exclude/src/main.rs
@@ -305,6 +305,9 @@ mod inner {
.context("Missing file descriptor in CMSG")?;
// SAFETY: The fd was just received via SCM_RIGHTS and is valid.
+ // The fd was produced by ScmpFilterContext::get_notify_fd.
+ // The fd does not need any cleanup other than close.
+ // Closing the fd is fine because ... TODO
let notify_fd = unsafe { OwnedFd::from_raw_fd(notify_fd) };
drop(notify_fd_rx);