Reduce size of unsafe blocks to the required minimum

Author: jplatte

crates/container/src/lib.rs

@@ -124,33 +124,27 @@ impl Container {
         }
 
         let sync_raw = (sync_r.as_raw_fd(), sync_w.as_raw_fd());
-        let pid = unsafe {
-            clone(
-                Box::new(|| match enter(&self, sync_raw, &mut f) {
-                    Ok(_) => 0,
-                    // Write error back to parent process
-                    Err(error) => {
-                        let error = format_error(error);
-                        let mut pos = 0;
-
-                        while pos < error.len() {
-                            let Ok(len) = write(&sync_w, &error.as_bytes()[pos..]) else {
-                                break;
-                            };
-
-                            pos += len;
-                        }
-
-                        _ = close(sync_w.as_raw_fd());
-
-                        1
-                    }
-                }),
-                &mut *addr_of_mut!(STACK),
-                flags,
-                Some(SIGCHLD),
-            )?
-        };
+        let clone_cb = Box::new(|| match enter(&self, sync_raw, &mut f) {
+            Ok(_) => 0,
+            // Write error back to parent process
+            Err(error) => {
+                let error = format_error(error);
+                let mut pos = 0;
+
+                while pos < error.len() {
+                    let Ok(len) = write(&sync_w, &error.as_bytes()[pos..]) else {
+                        break;
+                    };
+
+                    pos += len;
+                }
+
+                _ = close(sync_w.as_raw_fd());
+
+                1
+            }
+        });
+        let pid = unsafe { clone(clone_cb, &mut *addr_of_mut!(STACK), flags, Some(SIGCHLD))? };
 
         // Update uid / gid map to map current user to root in container
         if rootless {

moss/src/signal.rs

@@ -15,11 +15,13 @@ pub fn ignore(signals: impl IntoIterator<Item = Signal>) -> Result<Guard, Error>
     Ok(Guard(
         signals
             .into_iter()
-            .map(|signal| unsafe {
-                let action = sigaction(
-                    signal,
-                    &SigAction::new(SigHandler::SigIgn, SaFlags::empty(), SigSet::empty()),
-                )
+            .map(|signal| {
+                let action = unsafe {
+                    sigaction(
+                        signal,
+                        &SigAction::new(SigHandler::SigIgn, SaFlags::empty(), SigSet::empty()),
+                    )
+                }
                 .map_err(Error::Ignore)?;
 
                 Ok(PrevHandler { signal, action })