bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3

[Maxim Konovalov]

The following reply was made to PR bin/96993; it has been noted by GNATS.

From: Maxim Konovalov <maxim at macomnet.ru>
To: Hokan <hokan at me.umn.edu>
Cc: bug-followup at freebsd.org
Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind
 on 6.0 and 5.3
Date: Mon, 12 Jun 2006 23:42:57 +0400 (MSD)

 On Mon, 12 Jun 2006, 18:50-0000, Hokan wrote:
 
 >  This has been addressed in FreeBSD Security Advisory
 >  FreeBSD-SA-06:15.ypserv but further testing here has shown that the
 >  fix was not completely correct (although the security problem was
 >  stopped).
 >
 >  We have been having performance concerns with ypserv and decided to try compiling
 >  without tcpwrappers support.  This should be accomplished by modifying the Makefile
 >  to remove -DTCP_WRAPPER from CFLAGS:
 >
 >  -CFLAGS+= -DDB_CACHE -DTCP_WRAPPER -I.
 >  +CFLAGS+= -DDB_CACHE -I.
 >
 >  However, this no longer will compile after the security patch is applied.
 >
 >  The original version will compile and will use securenets.  (The original
 >  version will not use securenets if tcpwrappers is enabled.)
 
 It does compile on my HEAD and RELENG_6 systems.
 
 -- 
 Maxim Konovalov