From: Luca Boccassi <bluca@debian.org>
Date: Thu, 3 Feb 2022 17:43:45 +0000 (+0000)
Subject: portable: reopen socket with O_RDONLY
X-Git-Tag: v251-rc1~355
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1d2bf1f0eeb64304f24456ae8bd9fc534558704a;p=thirdparty%2Fsystemd.git

portable: reopen socket with O_RDONLY

Follow-up for e3f7ed944ae750a40685c52349f3cc850db0876e
---

diff --git a/src/portable/portable.c b/src/portable/portable.c
index 325cb702c51..d91ce7bc71c 100644
--- a/src/portable/portable.c
+++ b/src/portable/portable.c
@@ -611,7 +611,7 @@ static int extract_image_and_extensions(
                         continue;
 
                 /* We need to keep the fd valid, to return the PortableMetadata to the caller. */
-                extension_release_fd = fd_reopen(extension_release_meta->fd, O_CLOEXEC);
+                extension_release_fd = fd_reopen(extension_release_meta->fd, O_CLOEXEC|O_RDONLY);
                 if (extension_release_fd < 0)
                         return extension_release_fd;