diff options
| author | Nick Kralevich <nnk@google.com> | 2016-12-11 09:30:16 -0800 |
|---|---|---|
| committer | Stephen Smalley <sds@tycho.nsa.gov> | 2017-04-12 14:51:41 -0400 |
| commit | 64afa1aff1cd610d2493f780e2a44b551f668b84 (patch) | |
| tree | e3fb6756f529cf4b15736955db8f6d74bfa6bcd1 /libselinux/src/stringrep.c | |
| parent | 35af4592202cc4e7d7f605ce5d51dce5827cd55a (diff) | |
| download | android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.tar.gz android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.tar.bz2 android_external_selinux-64afa1aff1cd610d2493f780e2a44b551f668b84.zip | |
libselinux: add O_CLOEXEC
Makes libselinux safer and less likely to leak file descriptors when
used as part of a multithreaded program.
Signed-off-by: Nick Kralevich <nnk@google.com>
Diffstat (limited to 'libselinux/src/stringrep.c')
| -rw-r--r-- | libselinux/src/stringrep.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libselinux/src/stringrep.c b/libselinux/src/stringrep.c index 2dbec2bf..2d83f960 100644 --- a/libselinux/src/stringrep.c +++ b/libselinux/src/stringrep.c @@ -80,7 +80,7 @@ static struct discover_class_node * discover_class(const char *s) /* load up class index */ snprintf(path, sizeof path, "%s/class/%s/index", selinux_mnt,s); - fd = open(path, O_RDONLY); + fd = open(path, O_RDONLY | O_CLOEXEC); if (fd < 0) goto err3; |