From 7960eb9bc6b5d0a043ee1b9b9eff22285cbd8764 Mon Sep 17 00:00:00 2001
From: "Richard W.M. Jones" <rjones@redhat.com>
Date: Tue, 21 Nov 2017 11:36:59 +0000
Subject: [PATCH] urandom: Use O_CLOEXEC.

---
 customize/urandom.ml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/customize/urandom.ml b/customize/urandom.ml
index 3686f77d2..fd8cc8e8f 100644
--- a/customize/urandom.ml
+++ b/customize/urandom.ml
@@ -26,7 +26,7 @@
 
 open Unix
 
-let open_urandom_fd () = openfile "/dev/urandom" [O_RDONLY] 0
+let open_urandom_fd () = openfile "/dev/urandom" [O_RDONLY; O_CLOEXEC] 0
 
 let read_byte fd =
   let b = Bytes.make 1 ' ' in