diff --git a/src/os/removeall_at.go b/src/os/removeall_at.go
index 3098b93368d3c..bc632f5a751bd 100644
--- a/src/os/removeall_at.go
+++ b/src/os/removeall_at.go
@@ -173,7 +173,7 @@ func openFdAt(dirfd int, name string) (*File, error) {
 	var r int
 	for {
 		var e error
-		r, e = unix.Openat(dirfd, name, O_RDONLY, 0)
+		r, e = unix.Openat(dirfd, name, O_RDONLY|syscall.O_CLOEXEC, 0)
 		if e == nil {
 			break
 		}