bb_daemonize_or_rexec(DAEMON_CLOSE_EXTRA_FDS) does not close extra fds

[Arnout Vandecappelle]

 Hi all,

 I've noticed that bb_daemonize_or_rexec(DAEMON_CLOSE_EXTRA_FDS +
DAEMON_DEVNULL_STDIO) does not actually close all fds. This is what gets called
by start-stop-daemon -b, so it means that start-stop-daemon will propagate all
non-CLOEXEC fds from the parent.

 To test:

sh -c 'exec 3>&1; busybox start-stop-daemon -S -b -x /bin/sleep -- 10000'
ls -l /proc/$(pidof sleep)/fd


 This happens because we do:

	if (flags & DAEMON_DEVNULL_STDIO) {
		close(0);
		close(1);
		close(2);
	}

	fd = open(bb_dev_null, O_RDWR);
...
	while (fd > 2) {
		close(fd--);
	}

 Since we just did close(0), fd will be 0.


 The problem is that the assumption that open() returns an fd that is larger
than all existing fds is simply wrong.

 I think that there is no other way to close all open fds than to iterate over
/proc/self/fd. But that is of course not very portable.

 Thoughts?

 Regards,
 Arnout