aboutsummaryrefslogtreecommitdiffstats
path: root/libselinux/src/compute_user.c
diff options
context:
space:
mode:
authorNick Kralevich <nnk@google.com>2016-12-11 09:30:16 -0800
committerStephen Smalley <sds@tycho.nsa.gov>2017-04-12 14:51:41 -0400
commit64afa1aff1cd610d2493f780e2a44b551f668b84 (patch)
treee3fb6756f529cf4b15736955db8f6d74bfa6bcd1 /libselinux/src/compute_user.c
parent35af4592202cc4e7d7f605ce5d51dce5827cd55a (diff)
downloadandroid_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.tar.gz
android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.tar.bz2
android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.zip
libselinux: add O_CLOEXEC
Makes libselinux safer and less likely to leak file descriptors when used as part of a multithreaded program. Signed-off-by: Nick Kralevich <nnk@google.com>
Diffstat (limited to 'libselinux/src/compute_user.c')
-rw-r--r--libselinux/src/compute_user.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libselinux/src/compute_user.c b/libselinux/src/compute_user.c
index b37c5d33..7b881215 100644
--- a/libselinux/src/compute_user.c
+++ b/libselinux/src/compute_user.c
@@ -25,7 +25,7 @@ int security_compute_user_raw(const char * scon,
}
snprintf(path, sizeof path, "%s/user", selinux_mnt);
- fd = open(path, O_RDWR);
+ fd = open(path, O_RDWR | O_CLOEXEC);
if (fd < 0)
return -1;