From d7bd21baf58538b76cb47ac974894cab2b411589 Mon Sep 17 00:00:00 2001
From: Joey Hess <joeyh@joeyh.name>
Date: Fri, 1 Sep 2017 18:31:21 -0400
Subject: Make lock file descriptors close-on-exec.

---
 src/Propellor/Engine.hs | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/Propellor/Engine.hs')

diff --git a/src/Propellor/Engine.hs b/src/Propellor/Engine.hs
index f54da929..b4dc66ce 100644
--- a/src/Propellor/Engine.hs
+++ b/src/Propellor/Engine.hs
@@ -97,6 +97,7 @@ onlyProcess lockfile a = bracket lock unlock (const a)
 	lock = do
 		createDirectoryIfMissing True (takeDirectory lockfile)
 		l <- createFile lockfile stdFileMode
+		setFdOption l CloseOnExec True
 		setLock l (WriteLock, AbsoluteSeek, 0, 0)
 			`catchIO` const alreadyrunning
 		return l
-- 
cgit v1.3-2-g0d8e