chiark / gitweb /
memfd: disallow importing memfds without sealing