cri-o/conmon
Alexander Larsson f3408cbb5c conmon: Make all file descriptors CLOEXEC
We want to avoid inheriting these into the child. Doing so is both
confusing for the child, and a potential security issue if the
container has access to FDs that are from the outside of the
container.

Some of these are created after we fork for the child, so they
are not technically necessary. However, its best to do this as
we may change the code in the future and forget about this.

Signed-off-by: Alexander Larsson <alexl@redhat.com>
2017-06-02 16:11:06 +02:00
..
cmsg.c conmon: implement logging to logPath 2017-04-05 02:45:57 +10:00
cmsg.h conmon: implement logging to logPath 2017-04-05 02:45:57 +10:00
conmon.c conmon: Make all file descriptors CLOEXEC 2017-06-02 16:11:06 +02:00
Makefile Capture errors from runtime create failures 2017-05-15 13:35:18 -07:00