Fix potential dirfd leak.
Fix potential dirfd leak.

Make sure we don't accidentally leak this dir fd by using O_CLOEXEC.

Signed-off-by: Brian Goff <dc73d0991b982a8303e713ef531a313af77e242a@gmail.com>

containerd/cgroups