Re: [PATCH] net/unix: drop obsolete fd-recursion limits

2017-07-18 Thread Simon McVittie
On Mon, 17 Jul 2017 at 08:58:21 -0700, David Miller wrote: > > With all of this in mind, lets drop the recursion limit. It has no > > additional security value, anymore. On the contrary, it randomly > > confuses message brokers that try to forward file-descriptors, since > > any sendmsg(2) call can

Re: [PATCH] net/unix: drop obsolete fd-recursion limits

2017-07-17 Thread David Miller
From: David Herrmann Date: Mon, 17 Jul 2017 11:35:54 +0200 ... > With all of this in mind, lets drop the recursion limit. It has no > additional security value, anymore. On the contrary, it randomly > confuses message brokers that try to forward file-descriptors, since > any sendmsg(2) call can

Re: [PATCH] net/unix: drop obsolete fd-recursion limits

2017-07-17 Thread Tom Gundersen
On Mon, Jul 17, 2017 at 11:35 AM, David Herrmann wrote: > All unix sockets now account inflight FDs to the respective sender. > This was introduced in: > > commit 712f4aad406bb1ed67f3f98d04c044191f0ff593 > Author: willy tarreau > Date: Sun Jan 10 07:54:56 2016 +0100 > > unix

[PATCH] net/unix: drop obsolete fd-recursion limits

2017-07-17 Thread David Herrmann
All unix sockets now account inflight FDs to the respective sender. This was introduced in: commit 712f4aad406bb1ed67f3f98d04c044191f0ff593 Author: willy tarreau Date: Sun Jan 10 07:54:56 2016 +0100 unix: properly account for FDs passed over unix sockets and further refine