Re: [exim-dev] Remote root vulnerability in Exim

On Sat, 2010-12-11 at 18:12 +0000, Stefan Fritsch wrote:
> > Also, has the FD leak been addressed in an exim bug report at all? It
> > seems like a very sane thing to do also. There's no need for those to be
> > open to a running program.
>
> Maybe all relevant FDs should be marked with FD_CLOEXEC?

They mostly are already. We neglected to do that on the incoming SMTP
socket, for some reason. Fixed in the patch set I posted for review last
night.

--
dwmw2