Torsten Bögershausen <tboegi@xxxxxx> writes: >> >> diff --git a/sha1_file.c b/sha1_file.c >> index d5e1121..759991e 100644 >> --- a/sha1_file.c >> +++ b/sha1_file.c >> @@ -1485,7 +1485,7 @@ int check_sha1_signature(const unsigned char *sha1, void *map, >> >> int git_open_noatime(const char *name) > > Hm, should the function then be renamed into > > git_open_noatime_cloexec() > >> { >> - static int sha1_file_open_flag = O_NOATIME; >> + static int sha1_file_open_flag = O_NOATIME | O_CLOEXEC; Perhaps. In any case, this is probably something that can and should be done outside this series. I am tempted to suggest that the patch 13/13 under discussion may also want to be done outside the scope of, and before, this series. Even though with the current system an inherited file descriptor to v1 filter processes would cause issues, there is no good reason to expose this file desciptor to them. Thanks.