From 85c08dc013f9f99b58bc9b79284af0b35304237b Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Tue, 13 May 2014 16:35:34 +0200 Subject: pam_systemd: use F_DUPFD_CLOEXEC when dupping session fds http://lists.freedesktop.org/archives/systemd-devel/2014-May/019034.html --- src/login/pam-module.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/login/pam-module.c b/src/login/pam-module.c index 9873dd547a..1259457efc 100644 --- a/src/login/pam-module.c +++ b/src/login/pam-module.c @@ -475,7 +475,7 @@ _public_ PAM_EXTERN int pam_sm_open_session( } if (session_fd >= 0) { - session_fd = dup(session_fd); + session_fd = fcntl(session_fd, F_DUPFD_CLOEXEC, 3); if (session_fd < 0) { pam_syslog(handle, LOG_ERR, "Failed to dup session fd: %m"); return PAM_SESSION_ERR; -- cgit v1.2.3-54-g00ecf