On Tue, Jun 19, 2012 at 3:06 PM, Christian Heimes <[email protected]> wrote:
> ZMQ already has an extensive usage of file descriptors. Some may even > they it creates FDs like crazy. Without CLOEXEC all child processes > inherit the FDs from their parent process, therefore increasing the > total amount of FDs in the system and decreasing the amount of free FD > slots of the child process. This is an issue for processes that > fork()+execv() childs and use ZMQ to communicate with their children. > > It may even be a security issue when the parent process is privileged > because a child process may be abke to directly temper with epoll fds > and pipes of the parent's ZMQ context > This is interesting - I wonder if this is somethign that would help the situations where people do use fork to manage their children (in PHP that happens a fair bit). Ian
_______________________________________________ zeromq-dev mailing list [email protected] http://lists.zeromq.org/mailman/listinfo/zeromq-dev
