tech-kern archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: linux has added "close on exec" flags to lots of fd calls



Joerg Sonnenberger <joerg%britannica.bec.de@localhost> writes:
> On Mon, Aug 04, 2008 at 12:42:54PM -0400, Perry E. Metzger wrote:
>> Linux seems to be adding lots of flags to things like "open" to set
>> close on exec from the time an fd is born. They claim this helps with
>> security.
>
> I don't think this argument makes much sense, but for multi-threaded
> programs having something like POSIX spawn around it better anyway.
>
> It is trivial to support in the compat code. The API compat issue is IMO
> much less pressing as it won't work anywhere else so code should be
> fixed to be portable.

Dunno, it might be reasonable to provide it for open etc. -- it is
trivial to do and might come in handy.

In any case, it seemed like a good idea to mention it if only so
people would be aware.

Perry
-- 
Perry E. Metzger                perry%piermont.com@localhost


Home | Main Index | Thread Index | Old Index