Clarify namespace fd preservation comment.
Make it clear that the fds are not leaking into the child.
Bug: https://crbug.com/985467
Test: Compiles.
Change-Id: I468c49dc13baafd32fab6fbfdcf8d9a413b6bb76
diff --git a/libminijail.c b/libminijail.c
index 64d8719..4db32fa 100644
--- a/libminijail.c
+++ b/libminijail.c
@@ -2941,7 +2941,11 @@
inheritable_fds[size++] = stderr_fds[1];
}
- /* Preserve namespace file descriptors. */
+ /*
+ * Preserve namespace file descriptors over the close_open_fds()
+ * call. These are closed in minijail_enter() so they won't leak
+ * into the child process.
+ */
if (j->flags.enter_vfs)
minijail_preserve_fd(j, j->mountns_fd, j->mountns_fd);
if (j->flags.enter_net)
