libselinux: label_db::db_init(): open file with CLOEXEC mode

Open the file stream with the `e` flag, so that the underlying file
descriptor gets closed on an exec in a potential sibling thread.

Also drop the flag `b`, since it is ignored on POSIX systems.

Found by clang-tidy.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
This commit is contained in:
Christian Göttsche 2021-05-03 17:11:19 +02:00 committed by Petr Lautrbach
parent 65f1ccbecc
commit e1999379df

View file

@ -277,7 +277,7 @@ db_init(const struct selinux_opt *opts, unsigned nopts,
if (!path)
path = selinux_sepgsql_context_path();
if ((filp = fopen(path, "rb")) == NULL) {
if ((filp = fopen(path, "re")) == NULL) {
free(catalog);
return NULL;
}