Date: Wed, 09 Jul 2014 06:13:38 +0000 From: "Poul-Henning Kamp" <phk@....freebsd.dk> To: Michael Samuel <mik@...net.net> cc: oss-security@...ts.openwall.com Subject: Re: Re: Varnish - no CVE == bug regression In message <CACYkhxgfcOr=sXxUmsT8VctvHHqN-tJnxa4cKrV9nS0OrccZ0A@...l.gmail.com>, Michael Samuel w rites: >So just to clarify: > >On 9 July 2014 05:55, Poul-Henning Kamp <phk@....freebsd.dk> wrote: >> param.show auto_restart >> 200 132 >> auto_restart >> Value is: on [bool] (default) >> Default is: on >> >> Restart child process automatically if it dies. > >Does this mean that the parent holds the accept() socket open, so if a worker >dies (eg. due to the client injecting a header into it's own >connection) only that >connection is affected? No, a restart shuts all connections. The master process' job is to hold the configured stated and start/stop the worker process. As part of the startup the socket is opened & bound, but the master does not have anything to do with client sockets. This is mainly a security decision: The master must be involatile. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@...eBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence.
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.