console: set SFD_CLOEXEC on signal fd

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/console.c b/src/lxc/console.c
index 3feca832e623019b1f95047eac88dbee24e5c7fb..f875f8461b86e8bca80806be65607481376f7748 100644 (file)
--- a/src/lxc/console.c
+++ b/src/lxc/console.c
@@ -168,7 +168,7 @@ struct lxc_tty_state *lxc_console_signal_init(int srcfd, int dstfd)
                goto on_error;
        }
 
-       ts->sigfd = signalfd(-1, &mask, 0);
+       ts->sigfd = signalfd(-1, &mask, SFD_CLOEXEC);
        if (ts->sigfd < 0) {
                WARN("Failed to create signal fd");
                sigprocmask(SIG_SETMASK, &ts->oldmask, NULL);