src/usr.sbin/inetd, branch releng/5.1

Under some unusual conditions, inetd can leak a open file discriptor

2003-02-23T16:54:19Z

into a child process. Rather than closing the discriptors manually, mark all discriptors as close-on-exec. PR: 47694 Submitted by: Max Okumoto Obtained from: NetBSD MFC after: 2 weeks

After calling login_getclass, be sure to call login_close so that

2003-02-23T16:49:14Z

we don't leak memory. Only one of these two cases (reconfig) actually causes a leak because the other is usually followed by an exec. PR: 46845 Reviewed by: David Wang MFC after: 2 weeks

The tcp_wrappers function `fromhost()' can fail. In such

2003-02-13T17:08:23Z

cases, the `struct sockaddr' will not be allocated. Reported by: nectar MFC after: 2 days

Using LOGIN_SETALL &~LOGIN_SETMAC to avoid setting the MAC label improperly,

2003-01-16T03:41:57Z

rather than specifically setting the process priority and resource class; otherwise, we improperly set other aspects of the login class. We have a bit more to do here, but the proper fix will probably involve breaking out MAC labels from the login class at some point, as well as further clarifying the logic here. Pointed out by: kuriyama, max

For now, set only the resource limits and process priority associated

2003-01-08T17:10:11Z

with a class, rather than all aspects of the class when switching classes for an inetd service. Because we hard-code /daemon in the current inetd implementation, using SETALL has unfortunate side-effects involving the MAC code, and potentially other credential related settings in the future. This change maintains the DoS-resistent aspects of the class behavior, which is all that is promised in the inetd man page. A larger set of diffs providing more pluggability and configurability was deferred for this more simple approach in the short term. Reviewed by: ache Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories

Add used #include .

2002-10-27T17:46:53Z

When printing the wait status, break it down into a signal and a exit status.

2002-09-04T21:00:45Z

PR: 41912 Submitted by: Aaron Smith MFC after: 2 weeks

Swap sense of no_v[46]bind variables and rename as v[46]bind_ok -

2002-09-04T20:31:53Z

this avoids some double negatives which are a bit difficult to parse. Always tread v[46]bind{,_ok} as booleans.

Fix parsing of unix domain entries after addition of IPv6 RPC support.

2002-09-04T20:15:20Z

PR: 40771 Submitted by: Jean-Luc Richier

Don't initialise policy, v4bind and v6bind where the variables are

2002-09-02T20:07:14Z

declared - it was bad style and caused a bug. v[46]bind need to be reset whenever we go to the "more:" label. Jean-Luc and I came up with this patch independently, so it had better be right! PR: 40771 Submitted by: Jean-Luc Richier