From 6b60e045135c6c06fa98ef852a6b52190a66261f Mon Sep 17 00:00:00 2001
From: Aaron Kaiser <a_kaiser@posteo.de>
Date: Mon, 27 Oct 2025 10:15:55 +0100
Subject: [PATCH] don't seal sync_mem

---
 src/agent.rs | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/src/agent.rs b/src/agent.rs
index d3d81be..20e2cf7 100644
--- a/src/agent.rs
+++ b/src/agent.rs
@@ -16,7 +16,7 @@ unsafe impl Send for Agent {}
 impl Agent {
     pub(crate) unsafe fn new(agent_path: &Path, keyfile_path: &Path) -> Result<Self> {
         let data_fd = get_shared_mem_fd();
-        let sync_fd = memfd_create("sync\x00".as_ptr() as *const c_char, MFD_ALLOW_SEALING);
+        let sync_fd = memfd_create("sync\x00".as_ptr() as *const c_char, 0);
 
         if sync_fd <= 0 {
             bail!("creating memfd failed");
@@ -36,8 +36,6 @@ impl Agent {
             0,
         ) as *mut usize;
 
-        fcntl(sync_fd, F_ADD_SEALS, F_SEAL_FUTURE_WRITE);
-
         if sync_mem == MAP_FAILED as *mut usize {
             bail!("mmap failed");
         }