From 8363ca8c9fbe7030854d6f4200a19444e6c31469 Mon Sep 17 00:00:00 2001 From: emersion Date: Wed, 6 Mar 2019 00:32:24 +0100 Subject: [PATCH] xwayland: set CLOEXEC on /dev/null FD This avoids leaking the FD to Xwayland and its children. --- xwayland/xwayland.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/xwayland/xwayland.c b/xwayland/xwayland.c index 015c33e7..489640d3 100644 --- a/xwayland/xwayland.c +++ b/xwayland/xwayland.c @@ -1,4 +1,4 @@ -#define _POSIX_C_SOURCE 200112L +#define _POSIX_C_SOURCE 200809L #include #include #include @@ -92,7 +92,7 @@ _Noreturn static void exec_xwayland(struct wlr_xwayland *wlr_xwayland) { // Closes stdout/stderr depending on log verbosity enum wlr_log_importance verbosity = wlr_log_get_verbosity(); - int devnull = open("/dev/null", O_WRONLY | O_CREAT, 0666); + int devnull = open("/dev/null", O_WRONLY | O_CREAT | O_CLOEXEC, 0666); if (devnull < 0) { wlr_log_errno(WLR_ERROR, "XWayland: failed to open /dev/null"); _exit(EXIT_FAILURE);