From: Ansgar Burchardt <ansgar@debian.org>
Date: Fri, 15 Apr 2016 06:37:10 +0000 (+0200)
Subject: Do not pass all file descriptiors to external process.
X-Git-Url: https://git.decadent.org.uk/gitweb/?p=dak.git;a=commitdiff_plain;h=677bb8a719b350b450cb643f16bb57920dbb88c4

Do not pass all file descriptiors to external process.
---

diff --git a/daklib/filewriter.py b/daklib/filewriter.py
index 6f5da4f0..58245302 100644
--- a/daklib/filewriter.py
+++ b/daklib/filewriter.py
@@ -86,7 +86,7 @@ class BaseFileWriter(object):
         out_filename = "{0}{1}.new".format(path, suffix)
         if cmd is not None:
             with open(in_filename, 'r') as in_fh, open(out_filename, 'w') as out_fh:
-                check_call(cmd, stdin=in_fh, stdout=out_fh)
+                check_call(cmd, stdin=in_fh, stdout=out_fh, close_fds=True)
         self.rename("{0}{1}".format(path, suffix))
 
     def close(self):