[zeromq-dev] (py)zmq, fork and cloexec

Ian Barber ian.barber at gmail.com
Wed Jun 20 14:43:54 CEST 2012


On Tue, Jun 19, 2012 at 3:06 PM, Christian Heimes <lists at cheimes.de> wrote:

> ZMQ already has an extensive usage of file descriptors. Some may even
> they it creates FDs like crazy. Without CLOEXEC all child processes
> inherit the FDs from their parent process, therefore increasing the
> total amount of FDs in the system and decreasing the amount of free FD
> slots of the child process. This is an issue for processes that
> fork()+execv() childs and use ZMQ to communicate with their children.
>
> It may even be a security issue when the parent process is privileged
> because a child process may be abke to directly temper with epoll fds
> and pipes of the parent's ZMQ context
>


This is interesting - I wonder if this is somethign that would help the
situations where people do use fork to manage their children (in PHP that
happens a fair bit).

Ian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.zeromq.org/pipermail/zeromq-dev/attachments/20120620/7f8644cd/attachment.htm>


More information about the zeromq-dev mailing list