03/12: linux-container: Mark socket pair as SOCK_CLOEXEC.

[guix-commits]

civodul pushed a commit to branch master
in repository guix.

commit 00d5bb5d7f18555c250b4a6ef0b33b628acc3a3a
Author: Ludovic Courtès <ludo@gnu.org>
AuthorDate: Fri Sep 23 22:48:16 2022 +0200

    linux-container: Mark socket pair as SOCK_CLOEXEC.
    
    * gnu/build/linux-container.scm (run-container): Pass SOCK_CLOEXEC to
    'socketpair'.
---
 gnu/build/linux-container.scm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gnu/build/linux-container.scm b/gnu/build/linux-container.scm
index 73db127974..72e3a45422 100644
--- a/gnu/build/linux-container.scm
+++ b/gnu/build/linux-container.scm
@@ -233,7 +233,7 @@ that host UIDs (respectively GIDs) map to in the namespace."
   ;; The parent process must initialize the user namespace for the child
   ;; before it can boot.  To negotiate this, a pipe is used such that the
   ;; child process blocks until the parent writes to it.
-  (match (socketpair PF_UNIX SOCK_STREAM 0)
+  (match (socketpair PF_UNIX (logior SOCK_CLOEXEC SOCK_STREAM) 0)
     ((child . parent)
      (let ((flags (namespaces->bit-mask namespaces)))
        (match (clone flags)