[dak/master] Do not pass all file descriptiors to external process.

[Ansgar Burchardt <ansgar@debian.org>]

---
 daklib/filewriter.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/daklib/filewriter.py b/daklib/filewriter.py
index 6f5da4f..5824530 100644
--- a/daklib/filewriter.py
+++ b/daklib/filewriter.py
@@ -86,7 +86,7 @@ class BaseFileWriter(object):
         out_filename = "{0}{1}.new".format(path, suffix)
         if cmd is not None:
             with open(in_filename, 'r') as in_fh, open(out_filename, 'w') as out_fh:
-                check_call(cmd, stdin=in_fh, stdout=out_fh)
+                check_call(cmd, stdin=in_fh, stdout=out_fh, close_fds=True)
         self.rename("{0}{1}".format(path, suffix))
 
     def close(self):
-- 
2.1.4