On Wed, Feb 17, 2021 at 10:30:23PM +0100, Ondrej Mosnacek wrote: > Otherwise the fd will leak to subprocesses (e.g. modprobe). That's > mostly benign, but it may trigger an SELinux denial when the modprobe > process transitions to another domain. Applied, thanks.