Also note tool expectations of fork vs clone3

Co-authored-by: Josh Triplett <josh@joshtriplett.org>
This commit is contained in:
Josh Stone 2021-10-15 15:29:15 -07:00 committed by Josh Stone
parent fa2eee7bf2
commit 6edaaa6db8

View File

@ -168,6 +168,8 @@ impl Command {
// Bypassing libc for `clone3` can make further libc calls unsafe,
// so we use it sparingly for now. See #89522 for details.
// Some tools (e.g. sandboxing tools) may also expect `fork`
// rather than `clone3`.
let want_clone3_pidfd = self.get_create_pidfd();
// If we fail to create a pidfd for any reason, this will