mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-10-31 05:40:42 +00:00
45 lines
1.1 KiB
Go
45 lines
1.1 KiB
Go
// +build !windows
|
|
|
|
package utils
|
|
|
|
import (
|
|
"io/ioutil"
|
|
"os"
|
|
"strconv"
|
|
|
|
"golang.org/x/sys/unix"
|
|
)
|
|
|
|
func CloseExecFrom(minFd int) error {
|
|
fdList, err := ioutil.ReadDir("/proc/self/fd")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
for _, fi := range fdList {
|
|
fd, err := strconv.Atoi(fi.Name())
|
|
if err != nil {
|
|
// ignore non-numeric file names
|
|
continue
|
|
}
|
|
|
|
if fd < minFd {
|
|
// ignore descriptors lower than our specified minimum
|
|
continue
|
|
}
|
|
|
|
// intentionally ignore errors from unix.CloseOnExec
|
|
unix.CloseOnExec(fd)
|
|
// the cases where this might fail are basically file descriptors that have already been closed (including and especially the one that was created when ioutil.ReadDir did the "opendir" syscall)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// NewSockPair returns a new unix socket pair
|
|
func NewSockPair(name string) (parent *os.File, child *os.File, err error) {
|
|
fds, err := unix.Socketpair(unix.AF_LOCAL, unix.SOCK_STREAM|unix.SOCK_CLOEXEC, 0)
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
return os.NewFile(uintptr(fds[1]), name+"-p"), os.NewFile(uintptr(fds[0]), name+"-c"), nil
|
|
}
|