From 6aca3716f051b5b6bff63d51fff68b9c7ebc7474 Mon Sep 17 00:00:00 2001
From: Julian Andres Klode <jak@debian.org>
Date: Mon, 20 Oct 2025 17:14:31 +0200
Subject: ExecFork: Use close_range() if available

Use close_range() if we have it in preference to iterating
over /proc/self/fd and falling back to closing all possible
fds.

This builds sets of ranges to close that take into account
the APT::Keep-Fds vector, and a test case is provided to
ensure correctness of the splitting logic.

Preference is given to close_range() over /proc as in the
optimal case, this results in a single system call!
---
 doc/examples/configure-index | 1 +
 1 file changed, 1 insertion(+)

(limited to 'doc/examples')

diff --git a/doc/examples/configure-index b/doc/examples/configure-index
index c36f922b6..65b5032bc 100644
--- a/doc/examples/configure-index
+++ b/doc/examples/configure-index
@@ -642,6 +642,7 @@ APT::FTPArchive::release
    Version "<STRING>";
 };
 
+Debug::CloseRange "<BOOL>";
 Debug::NoDropPrivs "<BOOL>";
 APT::Sandbox
 {
-- 
cgit v1.2.3-70-g09d2