Expand description
Inherited descriptor validation only; seals are not launcher authentication.
Structs§
- Protected
Capture Inputs - No public fields or constructor. Contains no dispatch or mutation capability.
Functions§
- parse
- Caller must transfer child-owned fd3/fd4, never borrowed parent descriptors. Restores CLOEXEC on the consumed descriptors before further use; no dup/open of the config path. Public same-UID callers can forge expected inputs.