On Thu, Aug 10, 2023 at 01:25:42PM +0200, Phil Sutter wrote: > No need for the explicit fcntl() call, request the behaviour when > opening the descriptor. > > One fcntl() call setting FD_CLOEXEC remains in extensions/libxt_bpf.c, > the indirect syscall seems not to support passing the flag directly. > > Reported-by: Gaurav Gupta <g.gupta@xxxxxxxxxxx> > Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1104 > Signed-off-by: Phil Sutter <phil@xxxxxx> Patch applied.