Re: [nmh-workers] closefds() _before_ fork?

[Paul Vixie]

Ralph Corderoy wrote on 2019-04-23 05:10:
> ...
>
> I agree with the general principle that if we open it, we track it, and
> then close it so it doesn't reach the child, typically with O_CLOEXEC or
> FD_CLOEXEC.  ...

to that end, i propose that we treat any open descriptor N>2 at the time 
of an exec() to be a bug, which is to be fixed by setting O_CLOEXEC at 
time of creation.

--
P Vixie