It seem we don;t set close on exec on tdb files despite the fact that we
do fork+exec in many case (preexec, root prexec, various scripts and
commands we launch).
The attached patch would set close on exec on every tdb we use in samba
and utilities.
As far as I know there is no case where we rely on an executed process
to inherit tdb file descriptors.
If this is ok I'd like to apply this patch to all trees.
Simo.
--
Simo Sorce
Samba Team GPL Compliance Officer
email: idra@xxxxxxxxx
http://samba.org
tdb-close-on-exec.patch
Description: Text Data
|