Re: [Libguestfs] [nbdkit PATCH 4/8] Revert "RHEL 5: Define O_CLOEXEC and SOCK_CLOEXEC."

On 8/1/19 5:06 AM, Eric Blake wrote: In fact, this is probably still worthwhile, but I could possibly go one step further - you can ALSO set the bool that you are fork-safe if, in between fork and exec, you close all fds that happened to be leaked (that benefits from something like BSD's closefrom() for bulk-closing, or from glibc's ability to do opendir("/proc/self/fd") after fork in spite of POSIX stating that because opendir is not required to be async-signal-safe you could deadlock on other platforms). We do NOT want nbdkit to do the close-all-fds dance in general, only on platforms where we don't have atomic CLOEXEC (because nbdkit is the main program, we should have absolute control over all fds created). Note that the stance in libvirt is opposite: because that is a library, and may be linked in with a 3rd-party main executable that did not religiously use atomic CLOEXEC, libvirt has no choice but to do the close-all-fds dance on every fork. -- Eric Blake, Principal Software Engineer Red Hat, Inc. +1-919-301-3226 Virtualization: qemu.org | libvirt.org