ujail: add O_CLOEXEC flag to open() call

[project/procd.git] / jail / fs.c

diff --git a/jail/fs.c b/jail/fs.c
index 7b7b820..f390180 100644 (file)
--- a/jail/fs.c
+++ b/jail/fs.c
@@ -116,7 +116,7 @@ int add_path_and_deps(const char *path, int readonly, int error, int lib)
        if (path[0] == '/') {
                if (avl_find(&mounts, path))
                        return 0;
-               fd = open(path, O_RDONLY);
+               fd = open(path, O_RDONLY|O_CLOEXEC);
                if (fd == -1)
                        return error;
                add_mount(path, readonly, error);