[MESOS-9152] Close all file descriptors except whitelist_fds in posix/subprocess.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.2, 1.7.1
• Labels: containerizer mesosphere
• Epic Link: Unified Container
• Sprint: Mesosphere Sprint 2018-27, Mesosphere Sprint 2018-28, Mesosphere Sprint 2018-29, Mesosphere RI-6 Sprint 2018-31, Containerization R7 Sprint 32
• Story Points: 5
• Assignee: Qian Zhang
• Reporter: Gilbert Song
• Shepherd: Gilbert Song
• Created: 10/Aug/18 22:45
• Updated: 08/Nov/18 08:59
• Resolved: 08/Nov/18 08:59

Description

Close all file descriptors except whitelist_fds in posix/subprocess (currently whitelist_fds are not honored yet). This would avoid the fd being leaked. Please follow the steps from this commit to make corresponding change:
https://issues.apache.org/jira/browse/MESOS-8917?focusedCommentId=16522629&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-16522629

Issue Links

• causes: MESOS-9164 Subprocess should unset CLOEXEC on whitelisted file descriptors.
• is depended upon by: MESOS-9151 Container stuck at ISOLATING due to FD leak