Gary Lockyer 3a504d48c3 source3/rpc_server/rpc_server.c set socket close on exec ...

Set SOCKET_CLOEXEC on the sockets returned by accept.  This ensures that
the socket is unavailable to any child process created by system().
Making it harder for malicious code to set up a command channel,
as seen in the exploit for CVE-2015-0240

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2017-12-18 04:38:20 +01:00

..

dfs

s3:smbd: Pass down remote and local address to get_referred_path()

2017-05-31 02:24:18 +02:00

dssetup

werror: replace WERR_UNKNOWN_LEVEL with WERR_INVALID_LEVEL in source3/rpc_server/

2016-09-28 00:04:34 +02:00

echo

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

epmapper

s3-epmapper: Ignore epm_Map object guid

2016-11-12 02:49:23 +01:00

eventlog

werror: replace WERR_NOMEM with WERR_NOT_ENOUGH_MEMORY in source3/rpc_server/

2016-09-28 00:04:19 +02:00

fss

lib: Use messaging_send_all instead of message_send_all

2017-12-05 00:56:13 +01:00

initshutdown

s3: include ntdomain.h before including generated srv_ headers.

2011-05-02 15:03:44 +02:00

lsa

s3-rpc-server: fix type of enum in lsa server

2017-11-22 10:20:21 +01:00

mdssvc

s3/mdssvc: missing assignment in sl_pack_float

2017-08-29 01:00:34 +02:00

netlogon

netlogon: Implement SendToSam along with its winbind forwarding

2017-05-30 08:06:07 +02:00

ntsvcs

werror: replace WERR_GENERAL_FAILURE with WERR_GEN_FAILURE in source3/rpc_server/

2016-09-28 00:04:21 +02:00

samr

samr: Disable NTLM-based password changes on the server if NTLM is disabled

2017-07-04 06:57:21 +02:00

spoolss

lib: Use messaging_send_all instead of message_send_all

2017-12-05 00:56:13 +01:00

srvsvc

lib: Use messaging_send_all instead of message_send_all

2017-12-05 00:56:13 +01:00

svcctl

Correct "incluing" typos.

2017-02-22 08:26:23 +01:00

winreg

Update smbrun to allow for settings environment variables.

2016-10-13 04:26:26 +02:00

wkssvc

werror: replace WERR_UNKNOWN_LEVEL with WERR_INVALID_LEVEL in source3/rpc_server/

2016-09-28 00:04:34 +02:00

dcesrv_auth_generic.c

s3:rpc_server: move gensec_update() out of auth_generic_server_authtype_start*()

2017-05-21 21:05:09 +02:00

dcesrv_auth_generic.h

s3:rpc_server: move gensec_update() out of auth_generic_server_authtype_start*()

2017-05-21 21:05:09 +02:00

epmd.c

lib: Remove unused serverid.tdb

2017-12-05 04:58:26 +01:00

fssd.c

lib: Remove unused serverid.tdb

2017-12-05 04:58:26 +01:00

lsasd.c

lib: Remove unused serverid.tdb

2017-12-05 04:58:26 +01:00

mdssd.c

lib: Remove unused serverid.tdb

2017-12-05 04:58:26 +01:00

rpc_config.c

s3-rpc_server: Disable the NETLOGON server by default

2017-07-04 06:57:20 +02:00

rpc_config.h

s3-mdssvc: add mdssd RPC service daemon for mdssvc

2015-07-07 17:34:28 +02:00

rpc_contexts.c

s3-rpc_server: Move the context functions to own file.

2011-06-01 12:02:15 +02:00

rpc_contexts.h

s3-rpc_server: Move the context functions to own file.

2011-06-01 12:02:15 +02:00

rpc_ep_register.c

s3:rpc_server: make use of dcerpc_binding_set_abstract_syntax()

2014-02-13 11:54:16 +01:00

rpc_ep_register.h

s3-rpc_server: Use binding vector in rpc_ep_try_register().

2011-08-01 08:50:35 +02:00

rpc_handles.c

rpc_server: Fix a typo

2016-08-24 18:01:14 +02:00

rpc_modules.c

s3:rpc_server: allow building RPC services as shared modules

2016-02-21 19:21:17 +01:00

rpc_modules.h

s3:rpc_server: allow building RPC services as shared modules

2016-02-21 19:21:17 +01:00

rpc_ncacn_np.c

s3-rpc_server: Re-order and rename remote and local address in make_external_rpc_pipe{,_p}()

2017-03-29 02:37:28 +02:00

rpc_ncacn_np.h

s3-rpc_server: Re-order and rename remote and local address in make_external_rpc_pipe{,_p}()

2017-03-29 02:37:28 +02:00

rpc_pipes.h

s3-rpc_server: allow to set minimal auth level for a DCE/RPC service

2017-01-06 12:28:18 +01:00

rpc_server.c

source3/rpc_server/rpc_server.c set socket close on exec

2017-12-18 04:38:20 +01:00

rpc_server.h

s3-rpc_server: Re-order local and remote address in make_server_pipes_struct()

2017-03-29 02:37:28 +02:00

rpc_service_setup.c

lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)

2017-04-22 01:17:00 +02:00

rpc_service_setup.h

s3-rpc_server: remove some dead prototypes

2017-05-10 15:53:20 +02:00

rpc_sock_helper.c

s3-rpc_server: fix rpc_create_tcpip_sockets() processing of interfaces.

2015-04-30 15:14:27 +02:00

rpc_sock_helper.h

s3-rpc_server: Add RPC socket helper functions.

2011-08-01 08:50:35 +02:00

srv_access_check.c

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

srv_access_check.h

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

srv_pipe_hnd.c

rpc_server: Re-order and rename remote and local address in np_open()

2017-03-29 02:37:29 +02:00

srv_pipe_hnd.h

rpc_server: Re-order and rename remote and local address in np_open()

2017-03-29 02:37:29 +02:00

srv_pipe_internal.h

…

srv_pipe_register.c

s3-rpc_server: remove proto of nonexisting function

2011-05-02 15:03:43 +02:00

srv_pipe_register.h

s3-proto: move rpc_srv_register protos and structs to town headerfile.

2011-05-02 15:03:43 +02:00

srv_pipe.c

s3:rpc_server: wrap make_auth4_context() into {become,unbecome}_root()

2017-07-03 08:15:29 +02:00

srv_pipe.h

s3-rpc_server: (re)move last globally included rpc_server prototypes.

2011-05-02 16:05:31 +02:00

wscript_build

auth: Generate a human readable Authentication log message.

2017-03-29 02:37:26 +02:00