From aa0e7989c474063408e1aafeec7e4e8de2ccd659 Mon Sep 17 00:00:00 2001
From: Pavel Liubimov <prlyubimov@gmail.com>
Date: Tue, 1 Jul 2025 12:22:07 +0300
Subject: [PATCH] libcontainer: close seccomp agent connection to prevent
 resource leaks

Add missing defer conn.Close().

Signed-off-by: Pavel Liubimov <prlyubimov@gmail.com>
---
 libcontainer/process_linux.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/libcontainer/process_linux.go b/libcontainer/process_linux.go
index 3fcc79df4..bd1c1195f 100644
--- a/libcontainer/process_linux.go
+++ b/libcontainer/process_linux.go
@@ -854,6 +854,7 @@ func sendContainerProcessState(listenerPath string, state *specs.ContainerProces
 	if err != nil {
 		return fmt.Errorf("failed to connect with seccomp agent specified in the seccomp profile: %w", err)
 	}
+	defer conn.Close()
 
 	socket, err := conn.(*net.UnixConn).File()
 	if err != nil {