memfd-util: memfd may also have F_SEAL_EXEC flag

Follow-up for c29715a8f7. Fixes #27608.
2023-05-16 18:48:32 +09:00
parent 8e3303333f
commit 17915ea5b3
1 changed files with 2 additions and 1 deletions
@@ -106,7 +106,8 @@ int memfd_get_sealed(int fd) {
        if (r < 0)
                return -errno;

-        return r == (F_SEAL_SHRINK | F_SEAL_GROW | F_SEAL_WRITE | F_SEAL_SEAL);
+        /* We ignore F_SEAL_EXEC here to support older kernels. */
+        return FLAGS_SET(r, F_SEAL_SHRINK | F_SEAL_GROW | F_SEAL_WRITE | F_SEAL_SEAL);
 }

 int memfd_get_size(int fd, uint64_t *sz) {