Date: Mon, 12 Jun 2006 21:20:14 GMT From: Maxim Konovalov <maxim@macomnet.ru> To: freebsd-bugs@FreeBSD.org Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3 Message-ID: <200606122120.k5CLKEkA049204@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR bin/96993; it has been noted by GNATS. From: Maxim Konovalov <maxim@macomnet.ru> To: Hokan <hokan@me.umn.edu> Cc: bug-followup@freebsd.org Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3 Date: Tue, 13 Jun 2006 01:19:48 +0400 (MSD) On Mon, 12 Jun 2006, 16:12-0500, Hokan wrote: > On Mon, Jun 12, 2006 at 11:42:57PM +0400, Maxim Konovalov wrote: > > On Mon, 12 Jun 2006, 18:50-0000, Hokan wrote: > > > > > This has been addressed in FreeBSD Security Advisory > > > FreeBSD-SA-06:15.ypserv but further testing here has shown that the > > > fix was not completely correct (although the security problem was > > > stopped). > > > > > > We have been having performance concerns with ypserv and > > > decided to try compiling without tcpwrappers support. This > > > should be accomplished by modifying the Makefile to remove > > > -DTCP_WRAPPER from CFLAGS: > > > > > > -CFLAGS+= -DDB_CACHE -DTCP_WRAPPER -I. > > > +CFLAGS+= -DDB_CACHE -I. > > > > > > However, this no longer will compile after the security patch > > > is applied. > > > > > > The original version will compile and will use securenets. > > > (The original version will not use securenets if tcpwrappers is > > > enabled.) > > > > It does compile on my HEAD and RELENG_6 systems. > > The patch I had was apparently a beta version. The official version > does seem to work. Could you please clarify - can we close this PR or there are still unresolved issues? -- Maxim Konovalov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200606122120.k5CLKEkA049204>