CVE-2023-42669 s4-rpc_server: Disable rpcecho server by default
authorAndrew Bartlett <abartlet@samba.org>
Tue, 12 Sep 2023 06:59:44 +0000 (18:59 +1200)
committerJule Anger <janger@samba.org>
Sun, 8 Oct 2023 20:06:40 +0000 (22:06 +0200)
commit808a46b1877dc67e131d9d1cbcac701964c75571
tree2e2c04a2eb051c50af07ebca293460aa132bf777
parent23c5300d0990129edd29328bfbbd86b9e24deb86
CVE-2023-42669 s4-rpc_server: Disable rpcecho server by default

The rpcecho server is useful in development and testing, but should never
have been allowed into production, as it includes the facility to
do a blocking sleep() in the single-threaded rpc worker.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15474

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml
lib/param/loadparm.c
selftest/target/Samba4.pm
source3/param/loadparm.c
source4/rpc_server/wscript_build