socket SOCK_CLOEXEC

2 files changed, 2 insertions, 2 deletions

diff --git a/kms/client/kms_client.c b/kms/client/kms_client.c
index 25675ab..e37b4d5 100644
--- a/kms/client/kms_client.c
+++ b/kms/client/kms_client.c
@@ -302,7 +302,7 @@ int gsr_kms_client_init(gsr_kms_client *self, const char *card_path) {
         goto err;
     }
 
-    self->initial_socket_fd = socket(AF_UNIX, SOCK_STREAM, 0);
+    self->initial_socket_fd = socket(AF_UNIX, SOCK_STREAM | SOCK_CLOEXEC, 0);
     if(self->initial_socket_fd == -1) {
         fprintf(stderr, "gsr error: gsr_kms_client_init: socket failed, error: %s\n", strerror(errno));
         goto err;
diff --git a/kms/server/kms_server.c b/kms/server/kms_server.c
index c41f8bd..4d9171f 100644
--- a/kms/server/kms_server.c
+++ b/kms/server/kms_server.c
@@ -509,7 +509,7 @@ int main(int argc, char **argv) {
     }
 
     const char *domain_socket_path = argv[1];
-    socket_fd = socket(AF_UNIX, SOCK_STREAM, 0);
+    socket_fd = socket(AF_UNIX, SOCK_STREAM | SOCK_CLOEXEC, 0);
     if(socket_fd == -1) {
         fprintf(stderr, "kms server error: failed to create socket, error: %s\n", strerror(errno));
         return 2;