diff --git a/lib/krb5/crypto.c b/lib/krb5/crypto.c
index 0864fdf3b..146a32697 100644
--- a/lib/krb5/crypto.c
+++ b/lib/krb5/crypto.c
@@ -3455,6 +3455,7 @@ seed_something(void)
 	fd = open(seedfile, O_RDONLY);
 	if (fd >= 0) {
 	    ssize_t ret;
+	    rk_cloexec(fd);
 	    ret = read(fd, buf, sizeof(buf));
 	    if (ret > 0)
 		RAND_add(buf, ret, 0.0);