bin/96993: [nis] /var/yp/securenets does not function in ypbind
on 6.0 and 5.3
Hokan
hokan at me.umn.edu
Mon Jun 12 21:20:11 UTC 2006
The following reply was made to PR bin/96993; it has been noted by GNATS.
From: Hokan <hokan at me.umn.edu>
To: Maxim Konovalov <maxim at macomnet.ru>
Cc: bug-followup at freebsd.org
Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3
Date: Mon, 12 Jun 2006 16:12:52 -0500
On Mon, Jun 12, 2006 at 11:42:57PM +0400, Maxim Konovalov wrote:
> On Mon, 12 Jun 2006, 18:50-0000, Hokan wrote:
>
> > This has been addressed in FreeBSD Security Advisory
> > FreeBSD-SA-06:15.ypserv but further testing here has shown that the
> > fix was not completely correct (although the security problem was
> > stopped).
> >
> > We have been having performance concerns with ypserv and decided to try compiling
> > without tcpwrappers support. This should be accomplished by modifying the Makefile
> > to remove -DTCP_WRAPPER from CFLAGS:
> >
> > -CFLAGS+= -DDB_CACHE -DTCP_WRAPPER -I.
> > +CFLAGS+= -DDB_CACHE -I.
> >
> > However, this no longer will compile after the security patch is applied.
> >
> > The original version will compile and will use securenets. (The original
> > version will not use securenets if tcpwrappers is enabled.)
>
> It does compile on my HEAD and RELENG_6 systems.
The patch I had was apparently a beta version. The official version
does seem to work.
Thank you for your patience.
More information about the freebsd-bugs
mailing list