866514c70c
On Fedora, SELinux complains about these open file descriptors when the updown script invokes iptables. While it seems difficult to set the flag on all file descriptors, this at least fixes those covered by the SELinux policy. As these two cases are in code executed while the daemon is still single threaded, we avoid the use of atomic but not fully portable fdopen("e") or open(O_CLOEXEC) calls. Fixes #519. |
||
---|---|---|
.. | ||
Makefile.am | ||
random_plugin.c | ||
random_plugin.h | ||
random_rng.c | ||
random_rng.h |