CVSROOT: /cvs Module name: src Changes by: ren...@cvs.openbsd.org 2016/05/23 13:16:00
Modified files:
usr.sbin/ldpd : lde.c lde.h ldpd.c ldpd.h ldpe.c ldpe.h parse.y
Log message:
Improve security by calling exec after fork.
For each child process (lde and ldpe), re-exec ldpd with a special
"per-role" getopt flag. This way we have seperate ASLR/cookies per
process.
Based on a similar patch for bgpd, from claudio@
Requested by deraadt@
