#process-isolation

Linux close_range: File-Descriptor Hygiene Before exec

Use close_range to close or mark descriptor ranges atomically, avoid procfs enumeration races, and preserve only the descriptors a child process needs.