CVE-2023-42669 s4-rpc_server: Disable rpcecho server by default
authorAndrew Bartlett <abartlet@samba.org>
Tue, 12 Sep 2023 06:59:44 +0000 (18:59 +1200)
committerJule Anger <janger@samba.org>
Mon, 9 Oct 2023 20:14:05 +0000 (22:14 +0200)
commit5609c68aa5175a636dc3080676ebff36de1e971f
tree3f7d64678cf181bcdb698ac8772250350e57a47d
parent1b321f4424ab677a812bf0953bbdae6bebc3c377
CVE-2023-42669 s4-rpc_server: Disable rpcecho server by default

The rpcecho server is useful in development and testing, but should never
have been allowed into production, as it includes the facility to
do a blocking sleep() in the single-threaded rpc worker.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15474

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml
lib/param/loadparm.c
selftest/target/Samba4.pm
source3/param/loadparm.c
source4/rpc_server/wscript_build