Gary Lockyer 416b7e93fc source4/lib/socket/socket_ip.c set socket close on exec ...

Set SOCKET_CLOEXEC on the sockets returned by accept.  This ensures that
the socket is unavailable to any child process created by system().
Making it harder for malicious code to set up a command channel,
as seen in the exploit for CVE-2015-0240

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Mon Dec 18 08:49:57 CET 2017 on sn-devel-144

2017-12-18 08:49:57 +01:00

..

cmdline

s4: popt: Change from talloc_autofree_context() to NULL context.

2017-05-11 20:30:13 +02:00

com

s4: com: Replace erroneous inclusion of internal talloc.h header with external.

2017-08-15 08:06:40 +02:00

events

s4:lib/events: remove unused allow_warnings=True

2014-11-25 07:25:46 +01:00

http

libhttp: Remove an unneeded include

2017-08-16 04:11:47 +02:00

messaging

python: Port samba.messaging module to Python 3 compatible form.

2017-10-23 11:42:19 +02:00

policy

s4-lib-policy: fix type of enum

2017-11-22 10:20:20 +01:00

registry

python: Port samba.registry module to Python 3 compatible form

2017-10-18 10:20:26 +02:00

samba3

s4-lib/samba3: Remove unused smbpasswd_decode_acb_info()

2012-02-10 16:45:13 +11:00

socket

source4/lib/socket/socket_ip.c set socket close on exec

2017-12-18 08:49:57 +01:00

stream

dlist: remove unneeded type argument from DLIST_ADD_END()

2016-02-06 21:48:17 +01:00

tls

s4/lib/tls: Use SHA256 to sign the TLS certificates

2017-08-15 08:07:10 +02:00

wmi

lib: talloc: Use the system <talloc.h> include.

2017-08-17 00:53:48 +02:00