summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorDavid Woodhouse <David.Woodhouse@intel.com>2010-12-12 02:48:18 +0000
committerDavid Woodhouse <David.Woodhouse@intel.com>2010-12-12 02:52:20 +0000
commitfa32850be0d9e605da1b33305c122f7a59a24650 (patch)
treed32a7f5c6ea48158e30319c11b591fc24b61c25c /doc
parent261dc43e32f6039781ca92535e56f5caaa68b809 (diff)
Set FD_CLOEXEC on SMTP sockets after forking to handle the connection.
Diffstat (limited to 'doc')
-rw-r--r--doc/doc-txt/ChangeLog3
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index cf307014b..624e0a8c7 100644
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -89,6 +89,9 @@ DW/24 Bugzilla 1044: CVE-2010-4345 - part three: remove ALT_CONFIG_ROOT_ONLY
DW/25 Add TRUSTED_CONFIG_PREFIX_FILE option to allow alternative configuration
files to be used while preserving root privileges.
+DW/26 Set FD_CLOEXEC on SMTP sockets after forking in the daemon, to ensure
+ that rogue child processes cannot use them.
+
Exim version 4.72
-----------------