[master] disallow delzone on policiy zones
4311. [bug] Prevent "rndc delzone" from being used on response-policy zones. [RT #41593]
This commit is contained in:
@@ -14,8 +14,6 @@
|
||||
* PERFORMANCE OF THIS SOFTWARE.
|
||||
*/
|
||||
|
||||
/* $Id: named2.conf,v 1.5 2011/06/17 23:47:49 tbox Exp $ */
|
||||
|
||||
controls { /* empty */ };
|
||||
|
||||
include "../../common/controls.conf";
|
||||
@@ -33,10 +31,17 @@ view internal {
|
||||
allow-new-zones no;
|
||||
recursion yes;
|
||||
|
||||
response-policy { zone "policy"; };
|
||||
|
||||
zone "." {
|
||||
type hint;
|
||||
file "../../common/root.hint";
|
||||
};
|
||||
|
||||
zone "policy" {
|
||||
type master;
|
||||
file "normal.db";
|
||||
};
|
||||
};
|
||||
|
||||
view external {
|
||||
@@ -54,9 +59,9 @@ view external {
|
||||
acl match { none; };
|
||||
acl nobody { none; };
|
||||
view extra {
|
||||
match-clients { match; };
|
||||
allow-new-zones yes;
|
||||
allow-transfer { nobody; };
|
||||
allow-query { nobody; };
|
||||
allow-recursion { nobody; };
|
||||
match-clients { match; };
|
||||
allow-new-zones yes;
|
||||
allow-transfer { nobody; };
|
||||
allow-query { nobody; };
|
||||
allow-recursion { nobody; };
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user