pakfire: Don't leak our locking fd into the jail

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/pakfire/pakfire.c b/src/pakfire/pakfire.c
index 08a17ccb9148f2fddae42098d7cfcf263f65784f..eea0a94b17568338aedae5c119d02d76ae3351f3 100644 (file)
--- a/src/pakfire/pakfire.c
+++ b/src/pakfire/pakfire.c
@@ -302,7 +302,7 @@ static int pakfire_setup_path(struct pakfire* self, const char* path) {
                return r;
 
        // Open the path
-       r = open(self->path, O_DIRECTORY);
+       r = open(self->path, O_DIRECTORY|O_CLOEXEC);
        if (r < 0) {
                ERROR(self->ctx, "Could not open %s: %m\n", self->path);
                return -errno;