ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

2202. [security] The default acls for allow-query-cache and

Browse Source 
allow-recursion were not being applied. [RT #16960]
This commit is contained in:
Mark Andrews
2007-06-25 02:42:24 +00:00
parent 5d82e9e9d0
commit 685397fc48
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -1,3 +1,6 @@
2202. [security] The default acls for allow-query-cache and
allow-recursion were not being applied. [RT #16960]
2200. [bug] The search for cached NSEC records was stopping to
early leading to excessive DLV queries. [RT #16930]

6
bin/named/server.c
View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: server.c,v 1.419.18.54 2007/05/15 02:31:05 marka Exp $ */
/* $Id: server.c,v 1.419.18.55 2007/06/25 02:42:24 marka Exp $ */
/*! \file */
@@ -1438,7 +1438,7 @@ configure_view(dns_view_t *view, const cfg_obj_t *config,
CHECK(configure_view_acl(vconfig, config, "allow-query-cache",
actx, ns_g_mctx, &view->queryacl));
if (view->queryacl == NULL)
CHECK(configure_view_acl(NULL, ns_g_defaults,
CHECK(configure_view_acl(NULL, ns_g_config,
"allow-query-cache", actx,
ns_g_mctx, &view->queryacl));
@@ -1463,7 +1463,7 @@ configure_view(dns_view_t *view, const cfg_obj_t *config,
* Set default "allow-recursion" acl.
*/
if (view->recursionacl == NULL && view->recursion)
CHECK(configure_view_acl(NULL, ns_g_defaults, "allow-recursion",
CHECK(configure_view_acl(NULL, ns_g_config, "allow-recursion",
actx, ns_g_mctx, &view->recursionacl));
CHECK(configure_view_acl(vconfig, config, "sortlist",