Gary Lockyer 34f7894719 ctdb/tcp/tcp_connect.c set socket close on exec ... Set SOCKET_CLOEXEC on the sockets returned by accept. This ensures that the socket is unavailable to any child process created by system(). Making it harder for malicious code to set up a command channel, as seen in the exploit for CVE-2015-0240 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>		2017-12-18 04:38:20 +01:00
..
ctdb_tcp.h	ctdb-daemon: Stop using tevent compatibility definitions	2015-10-30 02:00:27 +01:00
tcp_connect.c	ctdb/tcp/tcp_connect.c set socket close on exec	2017-12-18 04:38:20 +01:00
tcp_init.c	ctdb-transport: Replace ctdb_logging.h with common/logging.h	2015-11-16 00:46:15 +01:00
tcp_io.c	ctdb-transport: Replace ctdb_logging.h with common/logging.h	2015-11-16 00:46:15 +01:00