Re: patch for close on exec

[Richard Gooch <rgooch@xxxxxxxxxxxxxxx>]

Russell Coker writes:
> The following patch for devfsd.c makes it close the .devfsd file on exec.
> 
> At the moment the only problem that the open file handle causes is
> that it's against my security policy for the domain insmod_t to read
> devfs_t domain character devices.  But there could be more serious
> issues that I haven't considered.

Well, I can't think of any problems, but since the .devfsd file isn't
needed by anything else, it's probably a good idea to close it. Done.

                                Regards,

                                        Richard....
Permanent: rgooch@xxxxxxxxxxxxx
Current:   rgooch@xxxxxxxxxxxxxxx