diff options
author | Patrik Nyblom <pan@erlang.org> | 2010-08-25 18:04:56 +0200 |
---|---|---|
committer | Patrik Nyblom <pan@erlang.org> | 2010-08-31 15:42:52 +0200 |
commit | 1ff4783ab8b1bdb32ced6072eb193896b429d115 (patch) | |
tree | b4127695639279808b40b65fb4f3774af43976e3 /bootstrap | |
parent | 716d3f57b471b2e2c3b5772008f5d32767c6cbeb (diff) | |
download | otp-1ff4783ab8b1bdb32ced6072eb193896b429d115.tar.gz otp-1ff4783ab8b1bdb32ced6072eb193896b429d115.tar.bz2 otp-1ff4783ab8b1bdb32ced6072eb193896b429d115.zip |
Fix anomalies in epmd not yet reported as security issues
Use erts_(v)snprintf to ensure no buffer overruns in debug printouts.
Disallow everything except port and name requests from remote nodes.
Disallow kill command even from localhost if alive nodes exist.
-relaxed_command_check when starting epmd returns the possibility to
kill this epmd when nodes are alive (from localhost).
Disallow stop command completely except if -relaxed_command_check is given
when epmd was started.
Environment variable ERL_EPMD_RELAXED_COMMAND_CHECK can be set to always get
-relaxed_command_check.
Diffstat (limited to 'bootstrap')
0 files changed, 0 insertions, 0 deletions