diff options
| author | Nick Kralevich <nnk@google.com> | 2016-12-11 09:30:16 -0800 |
|---|---|---|
| committer | Stephen Smalley <sds@tycho.nsa.gov> | 2017-04-12 14:51:41 -0400 |
| commit | 64afa1aff1cd610d2493f780e2a44b551f668b84 (patch) | |
| tree | e3fb6756f529cf4b15736955db8f6d74bfa6bcd1 /libselinux/src/compute_user.c | |
| parent | 35af4592202cc4e7d7f605ce5d51dce5827cd55a (diff) | |
| download | android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.tar.gz android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.tar.bz2 android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.zip | |
libselinux: add O_CLOEXEC
Makes libselinux safer and less likely to leak file descriptors when
used as part of a multithreaded program.
Signed-off-by: Nick Kralevich <nnk@google.com>
Diffstat (limited to 'libselinux/src/compute_user.c')
| -rw-r--r-- | libselinux/src/compute_user.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libselinux/src/compute_user.c b/libselinux/src/compute_user.c index b37c5d33..7b881215 100644 --- a/libselinux/src/compute_user.c +++ b/libselinux/src/compute_user.c @@ -25,7 +25,7 @@ int security_compute_user_raw(const char * scon, } snprintf(path, sizeof path, "%s/user", selinux_mnt); - fd = open(path, O_RDWR); + fd = open(path, O_RDWR | O_CLOEXEC); if (fd < 0) return -1; |