diff --git a/server/IptablesBaseTest.cpp b/server/IptablesBaseTest.cpp
index bc56b49..c81773b 100644
--- a/server/IptablesBaseTest.cpp
+++ b/server/IptablesBaseTest.cpp
@@ -68,7 +68,7 @@
 
     std::string realCmd = StringPrintf("echo '%s'", sPopenContents.front().c_str());
     sPopenContents.pop_front();
-    return popen(realCmd.c_str(), "r");
+    return popen(realCmd.c_str(), "r");  // NOLINT(cert-env33-c)
 }
 
 int IptablesBaseTest::fakeExecIptablesRestoreWithOutput(IptablesTarget target,