]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: checks: mark CHECKS-FE dummy frontend as internal
authorAurelien DARRAGON <adarragon@haproxy.com>
Wed, 9 Apr 2025 19:40:44 +0000 (21:40 +0200)
committerAurelien DARRAGON <adarragon@haproxy.com>
Thu, 10 Apr 2025 20:10:31 +0000 (22:10 +0200)
CHECKS-FE frontend is a dummy frontend used to create checks sessions
as such, it is internal and should not be exposed to the user.
Better mark it as internal using PR_CAP_INT capability to prevent
proxy API from ever exposing it.

src/check.c

index 9e615ea9d6fdd7b8089b672ac9ea8c029c173d3f..22e0278e9130c355dd22e57ac4da2629c479fb5d 100644 (file)
@@ -1673,7 +1673,7 @@ static int start_checks()
                ha_alert("Out of memory creating the checks frontend.\n");
                return ERR_ALERT | ERR_FATAL;
        }
-       checks_fe.cap = PR_CAP_FE | PR_CAP_BE;
+       checks_fe.cap = PR_CAP_FE | PR_CAP_BE | PR_CAP_INT;
         checks_fe.mode = PR_MODE_TCP;
        checks_fe.maxconn = 0;
        checks_fe.conn_retries = CONN_RETRIES;