[MESOS-9175] `Subprocess::FD` can leak file descriptors into child processes

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: libprocess
• Assignee: Unassigned
• Reporter: James Peach
• Created: 21/Aug/18 22:51
• Updated: 21/Aug/18 22:52

Description

When you use the subprocess API, you can use Subprocess::FD() to define how the standard IO streams are attached to the child process. The default type argument is IO::DUPLICATED. In that case, the descriptors are duplicated with dup(2) in the parent process. The new file descriptors will have their close-on-exec flag cleared and could then be inherited to undefined child processes.

Issue Links

• is related to: MESOS-9164 Subprocess should unset CLOEXEC on whitelisted file descriptors.