Also note tool expectations of fork vs clone3

Co-authored-by: Josh Triplett <josh@joshtriplett.org>
cuviper · Nov 5, 2021 · 6edaaa6 · 6edaaa6
1 parent fa2eee7
commit 6edaaa6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/library/std/src/sys/unix/process/process_unix.rs b/library/std/src/sys/unix/process/process_unix.rs
@@ -168,6 +168,8 @@ impl Command {
 
         // Bypassing libc for `clone3` can make further libc calls unsafe,
         // so we use it sparingly for now. See #89522 for details.
+        // Some tools (e.g. sandboxing tools) may also expect `fork`
+        // rather than `clone3`.
         let want_clone3_pidfd = self.get_create_pidfd();
 
         // If we fail to create a pidfd for any reason, this will