bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3

[Hokan]

The following reply was made to PR bin/96993; it has been noted by GNATS.

From: Hokan <hokan at me.umn.edu>
To: mailto:  bug-followup at FreeBSD.org
Cc:  
Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3
Date: Mon, 12 Jun 2006 13:48:15 -0500

 This has been addressed in FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv but
 further testing here has shown that the fix was not completely correct (although
 the security problem was stopped).
 
 We have been having performance concerns with ypserv and decided to try compiling
 without tcpwrappers support.  This should be accomplished by modifying the Makefile
 to remove -DTCP_WRAPPER from CFLAGS:
 
 -CFLAGS+= -DDB_CACHE -DTCP_WRAPPER -I.
 +CFLAGS+= -DDB_CACHE -I.
 
 However, this no longer will compile after the security patch is applied.
 
 The original version will compile and will use securenets.  (The original
 version will not use securenets if tcpwrappers is enabled.)