Re: [Devel] Close on exec for font files

[Keith Packard]

Around 10 o'clock on Dec 26, Scott Long wrote:

> As I said in my earlier email, just call FT_Done_FreeType after you fork() 
> and before you exec().

That would require that the application calling fork/exec know that 
FreeType is actually involved.  Or, provide suitable hooks at every level 
of the API so that this information can move from the application to the 
FreeType library.  As I don't control the intervening APIs, it's pretty 
hard to do that.  Plus, it involves changing many applications instead of 
one library.

I'm also concerned about permission changes across the exec and whether
this could be used to gain access to files.

Keith Packard        XFree86 Core Team        Compaq Cambridge Research Lab