Do not leak file descriptors in client libs.

We need to make sure the mc socket is not leaked otherwise child processes will
pile up leaked file descriptors.
Add O_CLOEXEC when opening the cache.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/sss_client/nss_mc_common.c b/src/sss_client/nss_mc_common.c
index 5391df979..d910e17ba 100644
--- a/src/sss_client/nss_mc_common.c
+++ b/src/sss_client/nss_mc_common.c
@@ -106,7 +106,7 @@ errno_t sss_nss_mc_get_ctx(const char *name, struct sss_cli_mc_ctx *ctx)
         goto done;
     }
 
-    ctx->fd = open(file, O_RDONLY);
+    ctx->fd = open(file, O_RDONLY|O_CLOEXEC);
     if (ctx->fd == -1) {
         ret = EIO;
         goto done;