xref: /llvm-project/clang-tools-extra/docs/clang-tidy/checks/android/cloexec-epoll-create1.rst (revision 6e566bc5523f743bc34a7e26f050f1f2b4d699a8) 
1.. title:: clang-tidy - android-cloexec-epoll-create1
2
3android-cloexec-epoll-create1
4=============================
5
6``epoll_create1()`` should include ``EPOLL_CLOEXEC`` in its type argument to
7avoid the file descriptor leakage. Without this flag, an opened sensitive file
8would remain open across a fork+exec to a lower-privileged SELinux domain.
9
10Examples:
11
12.. code-block:: c++
13
14  epoll_create1(0);
15
16  // becomes
17
18  epoll_create1(EPOLL_CLOEXEC);
19