Gary Lockyer 9ccf164550 ctdb/server/ctdb_daemon.c set socket close on exec ...

Set SOCKET_CLOEXEC on the sockets returned by accept.  This ensures that
the socket is unavailable to any child process created by system().
Making it harder for malicious code to set up a command channel,
as seen in the exploit for CVE-2015-0240

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2017-12-18 04:38:20 +01:00

..

ctdb_banning.c

ctdb:banning: Improve debug message in ctdb_ban_node_event()

2016-06-01 14:02:20 +02:00

ctdb_call.c

ctdb-daemon: Allocate deferred calls off calling context

2017-11-21 05:03:16 +01:00

ctdb_cluster_mutex.c

ctdb-common: Drop CTDB's copy of sys_read() and sys_write()

2016-11-29 11:22:40 +01:00

ctdb_cluster_mutex.h

ctdb-cluster-mutex: Fix #endif decoration

2016-06-08 04:52:18 +02:00

ctdb_control.c

ctdb-daemon: Add implementation of tunnel controls

2017-10-10 11:45:18 +02:00

ctdb_daemon.c

ctdb/server/ctdb_daemon.c set socket close on exec

2017-12-18 04:38:20 +01:00

ctdb_eventd.c

ctdb-eventd: Simplify eventd code

2017-11-24 15:49:46 +01:00

ctdb_fork.c

ctdb-daemon: Add ctdb_vfork_exec()

2016-12-05 08:09:23 +01:00

ctdb_freeze.c

ctdb-daemon: Add a function to check if db access is allowed

2017-09-12 12:23:18 +02:00

ctdb_keepalive.c

ctdb-daemon: Add AllowMixedVersions tunable

2017-05-24 21:06:28 +02:00

ctdb_lock_helper.c

ctdb-locking: Remove unnecessary global variable

2017-02-17 10:44:14 +01:00

ctdb_lock.c

ctdb-locking: Get tdb open flags from tdb instead of re-calculating

2017-06-26 15:47:24 +02:00

ctdb_logging.c

Log the actual error returned when creating a pipe for client logging in CTDB fails. Helps with debugging issues.

2017-06-07 09:22:29 +02:00

ctdb_ltdb_server.c

ctdb-daemon: Send broadcast to connected nodes, not configured nodes

2017-10-05 05:19:21 +02:00

ctdb_monitor.c

ctdb-daemon: Send STARTUP control after startup event

2017-11-30 15:29:48 +01:00

ctdb_mutex_fcntl_helper.c

ctdb-common: Drop CTDB's copy of sys_read() and sys_write()

2016-11-29 11:22:40 +01:00

ctdb_persistent.c

ctdb-daemon: GET_DB_SEQNUM should read database conditionally

2017-09-12 12:23:18 +02:00

ctdb_recover.c

ctdb-daemon: Don't explicitly disable monitoring around recovery

2017-09-14 14:49:15 +02:00

ctdb_recoverd.c

ctdb-recoverd: Abort recovery/takeover if recmaster changes

2017-09-12 12:23:19 +02:00

ctdb_recovery_helper.c

ctdb-recovery-helper: Deregister message handler in error paths

2017-12-13 08:48:18 +01:00

ctdb_server.c

ctdb-daemon: Add code to process ctdb_req_tunnel packets

2017-10-10 11:45:19 +02:00

ctdb_statistics.c

ctdb-server: Replace ctdb_logging.h with common/logging.h

2015-11-16 00:46:15 +01:00

ctdb_takeover_helper.c

ctdb-protocol: Optionally print port for address printing functions

2017-09-19 13:30:26 +02:00

ctdb_takeover.c

ctdb-takeover: Send tcp tickles immediately on STARTUP control

2017-11-30 11:34:20 +01:00

ctdb_traverse.c

ctdb-daemon: Add accessors for CTDB_DB_FLAGS_PERSISTENT flag

2017-06-29 10:34:26 +02:00

ctdb_tunables.c

ctdb-daemon: Use refactored tunable code

2016-07-25 21:29:46 +02:00

ctdb_tunnel.c

ctdb-daemon: Add code to process ctdb_req_tunnel packets

2017-10-10 11:45:19 +02:00

ctdb_update_record.c

ctdb-daemon: Add accessors for CTDB_DB_FLAGS_PERSISTENT flag

2017-06-29 10:34:26 +02:00

ctdb_uptime.c

ctdb-server: Replace ctdb_logging.h with common/logging.h

2015-11-16 00:46:15 +01:00

ctdb_vacuum.c

ctdb-daemon: Add accessors for CTDB_DB_FLAGS_PERSISTENT flag

2017-06-29 10:34:26 +02:00

ctdbd.c

ctdb-daemon: Fix default socket location

2017-08-17 15:50:37 +02:00

eventscript.c

ctdb-protocol: Replace ctdb_event_header with sock_packet_header

2017-09-01 08:52:07 +02:00

ipalloc_common.c

ctdb-protocol: Optionally print port for address printing functions

2017-09-19 13:30:26 +02:00

ipalloc_deterministic.c

ctdb-takeover: IPAllocAlgorithm replaces LCP2PublicIPs, DeterministicIPs

2016-12-19 04:07:08 +01:00

ipalloc_lcp2.c

ctdb-protocol: Optionally print port for address printing functions

2017-09-19 13:30:26 +02:00

ipalloc_nondeterministic.c

ctdb-protocol: Optionally print port for address printing functions

2017-09-19 13:30:26 +02:00

ipalloc_private.h

ctdb-ipalloc: Switch noiphost to struct bitmap

2017-02-24 07:47:11 +01:00

ipalloc.c

ctdb-build: Split protocol-util as a separate subsystem

2017-09-19 13:30:26 +02:00

ipalloc.h

ctdb-ipalloc: Add per-IP known_on bitmap

2017-02-24 07:47:12 +01:00