[Pkg-openldap-devel] Bug#803197: Exactly the same problem happens with sendmail.

John Hughes john.hughes at calva.com
Mon Sep 4 16:42:37 UTC 2017


Sendmail, on start, closes all fd's above 2.

Since sendmail is linked to libldap, which is linked to gnutls this 
means sendmail closes fd 3, on which gnutls has opened /dev/urandom.

Later on in the sendmail run fd 3 gets reopened, and if a ldap function 
is called then gnutls unceremoniously closes the fd and reopens 
/dev/urandom.

 From sendmail's point of view it looks like one of its files has 
suddenly been replaced with random garbage!

I've hacked my copy of sendmail to close fds above 3, which works around 
the problem for me, but is a bit ugly.

-- 
John Hughes, CalvaEDI S.A.S. -- An Esker Company

<john.hughes at calva.com>
+33 1 4313 3131



More information about the Pkg-openldap-devel mailing list