From e668e80db0334946b01d20e53b03c05dea0f2cb8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Axel=20D=C3=B6rfler?= Date: Fri, 11 Sep 2015 08:57:15 +0200 Subject: [PATCH] VFS: Always open kernel FDs with O_CLOEXEC. * Avoids leaking them into userland. --- src/system/kernel/fs/vfs.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/system/kernel/fs/vfs.cpp b/src/system/kernel/fs/vfs.cpp index b279556bd9..94f91b36b9 100644 --- a/src/system/kernel/fs/vfs.cpp +++ b/src/system/kernel/fs/vfs.cpp @@ -8143,7 +8143,7 @@ _kern_open(int fd, const char* path, int openMode, int perms) if (openMode & O_CREAT) return file_create(fd, pathBuffer.LockBuffer(), openMode, perms, true); - return file_open(fd, pathBuffer.LockBuffer(), openMode, true); + return file_open(fd, pathBuffer.LockBuffer(), openMode | O_CLOEXEC, true); }