strongswan/src/charon
Martin Willi 866514c70c charon: Set CLOEXEC flag on daemon PID file and /dev/(u)random source FDs
On Fedora, SELinux complains about these open file descriptors when the
updown script invokes iptables. While it seems difficult to set the flag
on all file descriptors, this at least fixes those covered by the SELinux
policy.

As these two cases are in code executed while the daemon is still single
threaded, we avoid the use of atomic but not fully portable fdopen("e") or
open(O_CLOEXEC) calls.

Fixes #519.
2014-06-24 15:26:38 +02:00
..
.gitignore Added charon to .gitignore 2010-03-19 17:17:54 +01:00
Android.mk android: Remove dependency on libvstr 2013-11-13 11:40:47 +01:00
Makefile.am automake: replace INCLUDES by AM_CPPFLAGS 2013-07-18 14:59:19 +02:00
charon.c charon: Set CLOEXEC flag on daemon PID file and /dev/(u)random source FDs 2014-06-24 15:26:38 +02:00