core/exec-invoke: reopen OpenFile= fds with O_NOCTTY

diff --git a/src/core/exec-invoke.c b/src/core/exec-invoke.c
index 45f1539f7580eb43cffb888992854f98e73d546f..254f014141e6d97faba239d744d52db72a0adf07 100644 (file)
--- a/src/core/exec-invoke.c
+++ b/src/core/exec-invoke.c
@@ -3776,7 +3776,7 @@ static int get_open_file_fd(const ExecContext *c, const ExecParameters *p, const
                 else if (FLAGS_SET(of->flags, OPENFILE_TRUNCATE))
                         flags |= O_TRUNC;
 
-                fd = fd_reopen(ofd, flags | O_CLOEXEC);
+                fd = fd_reopen(ofd, flags|O_NOCTTY|O_CLOEXEC);
                 if (fd < 0)
                         return log_exec_error_errno(c, p, fd, "Failed to reopen file '%s': %m", of->path);