ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Mark SIG(0) quota settings as experimantal

Browse Source 
A different solution in the future might be adopted depending
on feedback and other new information, so it makes sense to mark
these options as EXPERIMENTAL until we have more data.
This commit is contained in:
Aram Sargsyan
2024-06-03 10:56:02 +00:00
committed by Nicki Křížek
parent 54ddd848fe
commit d69fab1530
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
doc/misc/options
View File

@@ -277,8 +277,8 @@ options {
sig-signing-signatures <integer>;
sig-signing-type <integer>;
sig-validity-interval <integer> [ <integer> ]; // obsolete
sig0checks-quota <integer>;
sig0checks-quota-exempt { <address_match_element>; ... };
sig0checks-quota <integer>; // experimental
sig0checks-quota-exempt { <address_match_element>; ... }; // experimental
sortlist { <address_match_element>; ... }; // deprecated
stale-answer-client-timeout ( disabled | off | <integer> );
stale-answer-enable <boolean>;

5
lib/isccfg/namedconf.c
View File

@@ -1361,8 +1361,9 @@ static cfg_clausedef_t options_clauses[] = {
{ "session-keyalg", &cfg_type_astring, 0 },
{ "session-keyfile", &cfg_type_qstringornone, 0 },
{ "session-keyname", &cfg_type_astring, 0 },
{ "sig0checks-quota", &cfg_type_uint32, 0 },
{ "sig0checks-quota-exempt", &cfg_type_bracketed_aml, 0 },
{ "sig0checks-quota", &cfg_type_uint32, CFG_CLAUSEFLAG_EXPERIMENTAL },
{ "sig0checks-quota-exempt", &cfg_type_bracketed_aml,
CFG_CLAUSEFLAG_EXPERIMENTAL },
{ "sit-secret", NULL, CFG_CLAUSEFLAG_ANCIENT },
{ "stacksize", &cfg_type_size, CFG_CLAUSEFLAG_ANCIENT },
{ "startup-notify-rate", &cfg_type_uint32, 0 },