From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 31 May 2012 14:44:03 +0000 (+0200)
Subject: starter: Close open file descriptors when forking daemons.
X-Git-Tag: 5.0.0~194
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=402ae88af9a984b8a31c4a27f3cef14f76573a62;p=thirdparty%2Fstrongswan.git

starter: Close open file descriptors when forking daemons.
---

diff --git a/src/starter/invokecharon.c b/src/starter/invokecharon.c
index e889394150..ead55e9cc6 100644
--- a/src/starter/invokecharon.c
+++ b/src/starter/invokecharon.c
@@ -192,6 +192,7 @@ int starter_start_charon (starter_config_t *cfg, bool no_fork, bool attach_gdb)
 		case 0:
 			/* child */
 			setsid();
+			closefrom(3);
 			sigprocmask(SIG_SETMASK, 0, NULL);
 			/* disable glibc's malloc checker, conflicts with leak detective */
 			setenv("MALLOC_CHECK_", "0", 1);
diff --git a/src/starter/invokepluto.c b/src/starter/invokepluto.c
index 70c0692ea2..2f46c99fbc 100644
--- a/src/starter/invokepluto.c
+++ b/src/starter/invokepluto.c
@@ -276,6 +276,7 @@ starter_start_pluto (starter_config_t *cfg, bool no_fork, bool attach_gdb)
 				}
 			}
 			setsid();
+			closefrom(3);
 			sigprocmask(SIG_SETMASK, 0, NULL);
 			/* disable glibc's malloc checker, conflicts with leak detective */
 			setenv("MALLOC_CHECK_", "0", 1);