Are you saying all the filedescriptors should be closed when the selinux scriptlet is exec'd or am I misreading you here.
Are you saying all the filedescriptors should be closed when the selinux scriptlet is exec'd or am I misreading you here.