Wim Taymans 7bfa93de05 security: add missing O_CLOEXEC/SOCK_CLOEXEC flags ... File and Resource Handling: Medium Several file and socket operations were missing the close-on-exec flag, which causes file descriptors to leak to child processes created via fork+exec. This could allow child processes unintended access to privileged resources. - node-driver.c: SOCK_DGRAM socket for SIOCETHTOOL ioctl leaked to child processes - pw-container.c: Unix domain listen socket leaked to spawned container processes - compress-offload-api.c: ALSA compress-offload device fd leaked to child processes Added O_CLOEXEC to open() calls and SOCK_CLOEXEC to socket() calls. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-04-28 12:20:33 +02:00
..
cpu-arm.c
cpu-riscv.c
cpu-x86.c
cpu.c
dbus.c
evl-plugin.c
evl-system.c
journal.c
logger.c
loop.c
meson.build
node-driver.c	security: add missing O_CLOEXEC/SOCK_CLOEXEC flags	2026-04-28 12:20:33 +02:00
null-audio-sink.c
plugin.c
system.c