git.samba.org / sfrench / samba-autobuild / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 562ac9a) | patch
source3/winbindd/winbindd.c set socket close on exec
authorGary Lockyer <gary@catalyst.net.nz>
Sun, 10 Dec 2017 20:58:59 +0000 (09:58 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 18 Dec 2017 03:38:20 +0000 (04:38 +0100)
commit242aacb0e25c606ba1d003fb37e41d0b1b8c8e96
treefa028ebe36791b19eff7dc0c466a9fb5f8ad035ftree
parent562ac9a9559802b64cb8b2990a8172444040a1c8commit | diff
source3/winbindd/winbindd.c set socket close on exec

Set SOCKET_CLOEXEC on the sockets returned by accept.  This ensures that
the socket is unavailable to any child process created by system().
Making it harder for malicious code to set up a command channel,
as seen in the exploit for CVE-2015-0240

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source3/winbindd/winbindd.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.