Tools: hv: kvp: ensure kvp device fd is closed on exec
authorVitaly Kuznetsov <vkuznets@redhat.com>
Thu, 7 Jul 2016 01:24:10 +0000 (18:24 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 27 Apr 2017 07:09:33 +0000 (09:09 +0200)
commit397488e09bf2670c841b9f9d8652ce5dd1c952f4
treebabfcca0f32e850fe6e12d814be941bfba25d3d5
parent2a60bb635236ead6437b37a5b4085da1e33962b1
Tools: hv: kvp: ensure kvp device fd is closed on exec

commit 26840437cbd6d3625ea6ab34e17cd34bb810c861 upstream.

KVP daemon does fork()/exec() (with popen()) so we need to close our fds
to avoid sharing them with child processes. The immediate implication of
not doing so I see is SELinux complaining about 'ip' trying to access
'/dev/vmbus/hv_kvp'.

Signed-off-by: Vitaly Kuznetsov <vkuznets@redhat.com>
Signed-off-by: K. Y. Srinivasan <kys@microsoft.com>
Signed-off-by: Sumit Semwal <sumit.semwal@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
tools/hv/hv_kvp_daemon.c