CVE-2023-42669 s4-rpc_server: Disable rpcecho server by default
authorAndrew Bartlett <abartlet@samba.org>
Tue, 12 Sep 2023 06:59:44 +0000 (18:59 +1200)
committerJule Anger <janger@samba.org>
Mon, 9 Oct 2023 20:15:19 +0000 (22:15 +0200)
commite652fbe8525dfaa5b7d794cac90f9d216432e78c
tree473adfe5904e020d3accf85ffbe133bd8a7f9efe
parent4b3da3a97d1cbfd17a4eef466eb3bc1fc4887a34
CVE-2023-42669 s4-rpc_server: Disable rpcecho server by default

The rpcecho server is useful in development and testing, but should never
have been allowed into production, as it includes the facility to
do a blocking sleep() in the single-threaded rpc worker.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15474

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml
lib/param/loadparm.c
selftest/target/Samba4.pm
source3/param/loadparm.c
source4/rpc_server/wscript_build