execute: explain in a comment, why close_all_fds() is invoked the second time differently

2014-08-21 17:35:19 +02:00 · 2014-08-21 17:35:19 +02:00 · f461c8073d
parent 430e21c2f7
commit f461c8073d
1 changed files with 3 additions and 1 deletions
--- a/src/core/execute.c
+++ b/src/core/execute.c
@ -1635,7 +1635,9 @@ int exec_spawn(ExecCommand *command,
                }

                /* We repeat the fd closing here, to make sure that
-                 * nothing is leaked from the PAM modules */
+                 * nothing is leaked from the PAM modules. Note that
+                 * we are more aggressive this time since socket_fd
+                 * and the netns fds we don#t need anymore. */
                err = close_all_fds(fds, n_fds);
                if (err >= 0)
                        err = shift_fds(fds, n_fds);