process-util: add new FORK_NEW_MOUNTNS flag to safe_fork()

That way we can move one more code location to use safe_fork()

diff --git a/src/basic/process-util.c b/src/basic/process-util.c
index c60ca7516c2aad42697aee6fb254d0e9f0131f99..b468429a8ccd1d655d8b436b8aceb9087490f8ee 100644 (file)
--- a/src/basic/process-util.c
+++ b/src/basic/process-util.c
@@ -1213,7 +1213,10 @@ int safe_fork_full(
                 if (sigprocmask(SIG_SETMASK, &ss, &saved_ss) < 0)
                         return log_full_errno(prio, errno, "Failed to set signal mask: %m");
 
-        pid = fork();
+        if (flags & FORK_NEW_MOUNTNS)
+                pid = raw_clone(SIGCHLD|CLONE_NEWNS);
+        else
+                pid = fork();
         if (pid < 0) {
                 r = -errno;
 

diff --git a/src/basic/process-util.h b/src/basic/process-util.h
index f52f95ac1dad59e2659f5d48130a6a9e13b23c3a..652e4c34163e0b25348a20012990a849e022585d 100644 (file)
--- a/src/basic/process-util.h
+++ b/src/basic/process-util.h
@@ -182,6 +182,7 @@ typedef enum ForkFlags {
         FORK_REOPEN_LOG    = 1U << 4,
         FORK_LOG           = 1U << 5,
         FORK_WAIT          = 1U << 6,
+        FORK_NEW_MOUNTNS   = 1U << 7,
 } ForkFlags;
 
 int safe_fork_full(const char *name, const int except_fds[], size_t n_except_fds, ForkFlags flags, pid_t *ret_pid);