shykes/docker — pull request #77 by alexlarsson (2014-03-24 14:36:00+00:00)
Title: beam: Make extracted Fds CloseOnExec

Also grab forklock to make sure no forks accidentally inherit the new fds
before they are made CLOEXEC There is a slight race condition between
ReadMsgUnix returns and when we grap the lock, so this is not
perfect. Unfortunately There is no way to pass MSG_CMSG_CLOEXEC to
recvmsg() nor any way to implement non-blocking i/o in go, so this is
hard to fix.

Docker-DCO-1.1-Signed-off-by: Alexander Larsson (github: alexlarsson)