diff --git a/lib/krb5/log.c b/lib/krb5/log.c
index 6aa68e638..af6fc543b 100644
--- a/lib/krb5/log.c
+++ b/lib/krb5/log.c
@@ -306,6 +306,7 @@ krb5_addlog_dest(krb5_context context, krb5_log_facility *f, const char *orig)
 		free(fn);
 		return ret;
 	    }
+	    rk_cloexec(i);
 	    file = fdopen(i, "a");
 	    if(file == NULL){
 		ret = errno;