diff options
| author | james <james@e7ae566f-a301-0410-adde-c780ea21d3b5> | 2008-07-26 07:27:03 +0000 |
|---|---|---|
| committer | james <james@e7ae566f-a301-0410-adde-c780ea21d3b5> | 2008-07-26 07:27:03 +0000 |
| commit | 5a2e9a2587372aeb4b74fa1aadf53283ed7cae10 (patch) | |
| tree | bc79922f81699bc51c2ac047309e6ab594eebcd2 /configure.ac | |
| parent | Added argv_x functions to buffer.[ch] to be used to safely build (diff) | |
| download | openvpn-5a2e9a2587372aeb4b74fa1aadf53283ed7cae10.tar.xz | |
Completely revamped the system for calling external programs and scripts:
* All external programs and scripts are now called by execve() on unix and
CreateProcess on Windows.
* The system() function is no longer used.
* Argument lists for external programs and scripts are now built by the new
argv_printf function which natively outputs to string arrays (i.e.
char *argv[] lists), never truncates its output, and eliminates the security
issues inherent in formatting and parsing command lines, and dealing with
argument quoting.
* The --script-security directive has been added to offer policy controls on
OpenVPN's execution of external programs and scripts.
Also added a new plugin example (openvpn/plugin/examples/log.c) that logs
information to stdout for every plugin method called by OpenVPN.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3122 e7ae566f-a301-0410-adde-c780ea21d3b5
Diffstat (limited to 'configure.ac')
| -rw-r--r-- | configure.ac | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/configure.ac b/configure.ac index 4da3e85..da53407 100644 --- a/configure.ac +++ b/configure.ac @@ -462,7 +462,8 @@ AC_CHECK_FUNCS(daemon chroot getpwnam setuid nice system getpid dup dup2 dnl getpass strerror syslog openlog mlockall getgrnam setgid dnl setgroups stat flock readv writev setsockopt getsockopt dnl setsid chdir putenv getpeername unlink dnl - poll chsize ftruncate sendmsg recvmsg getsockname) + poll chsize ftruncate sendmsg recvmsg getsockname dnl + execve) AC_CACHE_SAVE if test "${WIN32}" = "yes"; then |