1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
samba-mirror/lib/async_req
Gary Lockyer 8b3c582511 lib/async_req/async_sock.c set socket close on exec
Set SOCKET_CLOEXEC on the sockets returned by accept.  This ensures that
the socket is unavailable to any child process created by system().
Making it harder for malicious code to set up a command channel,
as seen in the exploit for CVE-2015-0240

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-18 04:38:19 +01:00
..
async_connect_send_test.c lib: tevent: Use system <tevent.h>, not internal header path (except in self-test). 2017-08-16 20:58:13 +02:00
async_sock.c lib/async_req/async_sock.c set socket close on exec 2017-12-18 04:38:19 +01:00
async_sock.h lib: Add accept_send/recv 2016-06-07 14:34:10 +02:00
wscript_build lib/async_req: do not install async_connect_send_test. 2015-12-01 17:41:19 +01:00