Date: Mon, 12 Jun 2006 18:50:21 GMT From: Hokan <hokan@me.umn.edu> To: freebsd-bugs@FreeBSD.org Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3 Message-ID: <200606121850.k5CIoLLu035545@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR bin/96993; it has been noted by GNATS. From: Hokan <hokan@me.umn.edu> To: mailto: bug-followup@FreeBSD.org Cc: Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3 Date: Mon, 12 Jun 2006 13:48:15 -0500 This has been addressed in FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv but further testing here has shown that the fix was not completely correct (although the security problem was stopped). We have been having performance concerns with ypserv and decided to try compiling without tcpwrappers support. This should be accomplished by modifying the Makefile to remove -DTCP_WRAPPER from CFLAGS: -CFLAGS+= -DDB_CACHE -DTCP_WRAPPER -I. +CFLAGS+= -DDB_CACHE -I. However, this no longer will compile after the security patch is applied. The original version will compile and will use securenets. (The original version will not use securenets if tcpwrappers is enabled.)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200606121850.k5CIoLLu035545>