Discussion:
[OLPC Security] Reaping children, and cleaning up their UIDs, /homes, etc.
Marcus Leech
2007-11-07 21:17:43 UTC
Permalink
Michael, et al:

I'm working on a mechanism to keep track of child data from the rainbow
daemon so that one could use the data to cleanup
UIDs, /home directories, etc. Right now, it just creates a
dictionary that is keyed by PID, and contains the bundle_id,
but from this, I can keep track of many more things...

I've also put in code to correctly close exactly the FDs we want, just
before execve(). Using dup(), as pointed out earlier
won't work, so I put in an os.walk('/proc/self/fd') to determine which
FDs need to be closed just before execvpe().

Cheers
-Marcus


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 251 bytes
Desc: OpenPGP digital signature
Url : http://lists.laptop.org/pipermail/security/attachments/20071107/046ea573/attachment.pgp
Loading...