{"action":"closed","issue":{"url":"https://api.github.com/repos/rust-lang/cargo/issues/4193","repository_url":"https://api.github.com/repos/rust-lang/cargo","labels_url":"https://api.github.com/repos/rust-lang/cargo/issues/4193/labels{/name}","comments_url":"https://api.github.com/repos/rust-lang/cargo/issues/4193/comments","events_url":"https://api.github.com/repos/rust-lang/cargo/issues/4193/events","html_url":"https://github.com/rust-lang/cargo/issues/4193","id":237045473,"number":4193,"title":"`cargo install` leaves sockets open when calling `cc`","user":{"login":"setharnold","id":5447148,"avatar_url":"https://avatars1.githubusercontent.com/u/5447148?v=4","gravatar_id":"","url":"https://api.github.com/users/setharnold","html_url":"https://github.com/setharnold","followers_url":"https://api.github.com/users/setharnold/followers","following_url":"https://api.github.com/users/setharnold/following{/other_user}","gists_url":"https://api.github.com/users/setharnold/gists{/gist_id}","starred_url":"https://api.github.com/users/setharnold/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/setharnold/subscriptions","organizations_url":"https://api.github.com/users/setharnold/orgs","repos_url":"https://api.github.com/users/setharnold/repos","events_url":"https://api.github.com/users/setharnold/events{/privacy}","received_events_url":"https://api.github.com/users/setharnold/received_events","type":"User","site_admin":false},"labels":[{"id":278183759,"url":"https://api.github.com/repos/rust-lang/cargo/labels/Command-install","name":"Command-install","color":"5319e7","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2017-06-19T22:48:21Z","updated_at":"2018-03-01T06:28:31Z","closed_at":"2018-03-01T06:28:31Z","author_association":"NONE","body":"Hello,\r\n\r\nI have written an AppArmor profile to confine cargo, rustup, rustc, etc. This profile is not perfect but works for me. As a result of this profile I can see the `cargo install` tool leaves open sockets too long. For example,\r\n\r\n```\r\ncargo install cargo-script\r\n```\r\n\r\ncauses AppArmor to report that `cc` has been passed file descriptors for sockets to:\r\n\r\n```\r\n192.30.255.116:443\r\n50.17.240.35:443\r\n52.219.20.136:443\r\n```\r\n\r\nI'd be happy to share my AppArmor profile if it would help but I suspect a faster way to debug the issue might start with replacing `cc` with a program that dumps its `/proc/self/fd/` and looks for symlinks to `socket:[nnnnn]` (or simply sleeps and let a human do the work).\r\n\r\nThanks"}}
{"actor":{"display_login":"alexcrichton"}}