picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

execute: close inherited fds earlier

This commit is contained in:
Lennart Poettering 2010-07-12 20:34:53 +02:00
parent ab861dd00a
commit fc9b2a84dc
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
src/execute.c
View File

@ -968,6 +968,14 @@ int exec_spawn(ExecCommand *command,
goto fail;
}
/* Close sockets very early to make sure we don' block
* init reexecution because it cannot bind its sockets
* or so */
if (close_all_fds(fds, n_fds) < 0) {
r = EXIT_FDS;
goto fail;
}
if (!context->same_pgrp)
if (setsid() < 0) {
r = EXIT_SETSID;
@ -1111,16 +1119,6 @@ int exec_spawn(ExecCommand *command,
#ifdef HAVE_PAM
if (context->pam_name && username) {
/* Make sure no fds leak into the PAM
* supervisor process. We will call this later
* on again to make sure that any fds leaked
* by the PAM modules get closed before our
* exec(). */
if (close_all_fds(fds, n_fds) < 0) {
r = EXIT_FDS;
goto fail;
}
if (setup_pam(context->pam_name, username, context->tty_path, &pam_env, fds, n_fds) < 0) {
r = EXIT_PAM;
goto fail;
@ -1180,6 +1178,8 @@ int exec_spawn(ExecCommand *command,
free(d);
}
/* We repeat the fd closing here, to make sure that
* nothing is leaked from the PAM modules */
if (close_all_fds(fds, n_fds) < 0 ||
shift_fds(fds, n_fds) < 0 ||
flags_fds(fds, n_fds, context->non_blocking) < 0) {