1 files changed, 1 insertions, 1 deletions
diff --git a/eval.c b/eval.c
index 67f46d6..34fad7e 100644
--- a/eval.c
+++ b/eval.c
@@ -319,7 +319,7 @@ bool eval_empty(const struct expr *expr, struct eval_state *state) {
 	struct BFTW *ftwbuf = state->ftwbuf;
 
 	if (ftwbuf->typeflag == BFTW_DIR) {
-		int flags = 0;
+		int flags = O_RDONLY | O_CLOEXEC;
 #ifdef O_DIRECTORY
 		flags |= O_DIRECTORY;
 #endif