[pkg-lighttpd] Bug#446324: lighttpd: stderr not closed

[Michal Čihař]

Hi

Dne Thu, 01 Nov 2007 12:18:40 +0100
Olaf van der Spek <Olaf at XWIS.Net> napsal(a):

> Why? Doesn't POSIX or another standard indicate who should close them?
> Not leaking them in the first place would be even more secure I think.

Well I did add redirection to /dev/null to postinst, so it works now.
I really have no idea whether there is some standard about this, I
simply do not see reason for not closing anything what could be left
open. The only reason I see is that it is extra code.

> That's true, but how does the daemon know which fds are open and which 
> are not and which ones should be closed?

It simply closed all up to 1024 or something like this (I really don't
have time to look up the code, but the thing I saw was just simple for
loop).

-- 
	Michal Čihař | http://cihar.com | http://blog.cihar.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-lighttpd-maintainers/attachments/20071102/0e0b6bba/attachment.pgp