=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== lacme-0.7/lacme-73- lacme-0.7/lacme:74:sub set_FD_CLOEXEC($$); lacme-0.7/lacme-75-my $CONFFILENAME = $OPTS{config} // first { -f $_ } ############################################## lacme-0.7/lacme-85- # don't close $CONFFILE so we can pass it to the client lacme-0.7/lacme:86: set_FD_CLOEXEC($CONFFILE, 1); lacme-0.7/lacme-87- ############################################## lacme-0.7/lacme-239-# lacme-0.7/lacme:240:sub set_FD_CLOEXEC($$) { lacme-0.7/lacme-241- my ($fd, $set) = @_; ############################################## lacme-0.7/lacme-299- my @sockaddr4; lacme-0.7/lacme:300: foreach my $sockaddr (@sockaddr) { lacme-0.7/lacme-301- my $domain = Socket::sockaddr_family($sockaddr) // die; ############################################## lacme-0.7/lacme-337- drop_privileges($conf->{user}, $conf->{group}, $tmpdir); lacme-0.7/lacme:338: set_FD_CLOEXEC($sock, 0); lacme-0.7/lacme-339- $ENV{DEBUG} = $OPTS{debug}; ############################################## lacme-0.7/lacme-345- print STDERR "[$$] Forking ACME webserver bound to $p, child PID $pid\n" if $OPTS{debug}; lacme-0.7/lacme:346: set_FD_CLOEXEC($sock, 1); lacme-0.7/lacme-347- push @CLEANUP, sub() { ############################################## lacme-0.7/lacme-394- my $iptables_tmp = File::Temp::->new(TMPDIR => 1) // die; lacme-0.7/lacme:395: set_FD_CLOEXEC($iptables_tmp, 1); lacme-0.7/lacme-396- ############################################## lacme-0.7/lacme-428- lacme-0.7/lacme:429: foreach my $sockaddr (@sockaddr) { lacme-0.7/lacme-430- my ($port, $addr, $mask); ############################################## lacme-0.7/lacme-465- drop_privileges($accountd->{user}, $accountd->{group}, '/'); lacme-0.7/lacme:466: set_FD_CLOEXEC($s, 0); lacme-0.7/lacme-467- $client->close() or die "Can't close: $!"; ############################################## lacme-0.7/lacme-509- my @fileno = map { fileno($_) =~ /^(\d+)$/ ? $1 : die } ($CONFFILE, $client); # untaint fileno lacme-0.7/lacme:510: set_FD_CLOEXEC($client, 1); lacme-0.7/lacme-511- my $rv = spawn({in => $args->{in}, out => $args->{out}, child => sub() { lacme-0.7/lacme-512- drop_privileges($conf->{user}, $conf->{group}, $args->{chdir} // '/'); lacme-0.7/lacme:513: set_FD_CLOEXEC($_, 0) foreach ($CONFFILE, $client); lacme-0.7/lacme-514- seek($CONFFILE, SEEK_SET, 0) or die "Can't seek: $!"; ############################################## lacme-0.7/lacme-796- if (defined $conf->{notify}) { lacme-0.7/lacme:797: print STDERR "Running notification command `$conf->{notify}`\n"; lacme-0.7/lacme:798: if (system($conf->{notify}) != 0) { lacme-0.7/lacme-799- print STDERR "Warning: notification command exited with value ".($? >> 8)."\n";