Skip to content

Improve clusterd security.2 #438

Merged
merged 26 commits into from
Jan 29, 2025
Merged

Improve clusterd security.2 #438

merged 26 commits into from
Jan 29, 2025

Conversation

donald
Copy link
Collaborator

@donald donald commented Jan 29, 2025

No description provided.

Currently we leave zombies after udp_rx_push2() and possibly in other
places.

Reap children in the main loop.
When in daemon mode, close stdin right away. This avoids the need to
close stdin in various places after a fork.
Now that we accept random children to exist and exit at any time, use
waitpid() instead of wait() when we wait for a specific child somewhere
else in the code.

This change revealed an error in udp_rx_exec2() which might have
executed /sbin/make-automaps redundantly. Fix that. This is not tested
or analyzed very much, but udp_rx_exec2() is obsolete and should go away
soon anyway.
In two places we used double forks, probably so that we don't need to
reap. Now children are reaped in the main loop, so remove the extra
forks.
Improve usage string from really ugly to ugly, you are not a designer.
Remove the functions which implemented the obsolete commands `--push`
and `--push-amd-tar`.
@donald donald force-pushed the improve-clusterd-security.2 branch from 66c314e to 1deebf1 Compare January 29, 2025 14:54
@donald donald force-pushed the improve-clusterd-security.2 branch from 1deebf1 to 2c17224 Compare January 29, 2025 15:00
@donald donald merged commit 0a034e7 into master Jan 29, 2025
Sign in to join this conversation on GitHub.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant