xz: Landlock: Fix a file descriptor leak

tukaani-project · Nov 25, 2024 · 48ff3f0 · 48ff3f0
1 parent dbca3d0
commit 48ff3f0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/xz/sandbox.c b/src/xz/sandbox.c
@@ -196,6 +196,7 @@ enable_landlock(uint64_t required_rights)
 	if (syscall(SYS_landlock_restrict_self, ruleset_fd, 0U) != 0)
 		message_fatal(_("Failed to enable the sandbox"));
 
+	(void)close(ruleset_fd);
 	return;
 }