ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
5,832 Commits 589 Branches 805 Tags
f405ffddc865cd2301bfae191ff16bee91eeb44c
Commit Graph

722 Commits

Author SHA1 Message Date
Brian Wellington
71954c9571 I lied. This should be the last change to the setuid() code. Call 
initgroups() from ns_os_inituserinfo, and make sure that Linux initially has
the CAP_SETGID capability set so that it doesn't fail.
 2000-07-08 00:12:21 +00:00
Brian Wellington
c336121fb5 Hopefully the last change to the setuid code. Only call initgroups() 
if getuid() == 0.  Don't call ns_os_changeuser() more than once (it
could happen on Linux).

The code in its current form doesn't check for root before calling
setgid() or setuid(), since they'll fail and print reasonable error
messages (unless -u is supplied with the non-root user that ran named,
in which case it would succeed).  The call to initgroups() would fail for
non root, so it shouldn't be tried.

The previous (as of a few days ago) code just ignored the -u parameter
when named was run as non-root.  This was not good.
 2000-07-07 23:53:35 +00:00
Brian Wellington
4e5388b459 Clean up the uid switching code again so that setgid() is called in 
ns_os_changeuser().
 2000-07-07 22:10:54 +00:00
Brian Wellington
baeb4bcf32 In query_find(), if we're looking up a key and dns_db_find() returns 
DNS_R_DELEGATION, don't use the domain & ns set found by dns_db_find().
This means that a recursive server will not immediately ask the child zone
for a key set at the apex; the resolver will determine who to ask.
 2000-07-06 02:27:26 +00:00
Andreas Gustafsson
4defd73fca This is "the glue fix". It changes the additional data lookup 
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
 2000-07-05 23:10:06 +00:00
Andreas Gustafsson
c6ab6ca3fd moved linux_keepcaps() call and check for Linux nonroot caps back 
to earlier locations; use a separate boolean flag for keeping track of whether a
UID switch was requested rather than overloading the UID value zero
 2000-07-05 22:03:42 +00:00
Andreas Gustafsson
a074e41b97 style and new comments; no functional change 2000-07-04 01:33:47 +00:00
Brian Wellington
1e105376dd linux_keepcaps() was called without checking the various defines that 
surrounded the function definition.
 2000-07-03 20:00:44 +00:00
Brian Wellington
79e873be59 The reordering of code in the last change broke linux, since the determination 
of whether we could call setuid() was moved after the check.
 2000-07-03 18:28:38 +00:00
David Lawrence
202991557a 299. [cleanup] Get the user and group information before changing the 
root directory, so the administrator does not need to
			keep a copy of the user and group databases in the
			chroot'ed environment.  Suggested by Hakan Olsson.
 2000-07-01 00:48:06 +00:00
Andreas Gustafsson
8f874cca90 removed unnecessary locking in ns_interface_shutdown() that 
caused the server to deadlock on shutdown on the Alphas.
 2000-06-30 02:48:06 +00:00
Michael Graff
15197aefa1 workaround for NetBSD - close FDs before dup2(). 2000-06-28 16:26:40 +00:00
David Lawrence
fb1086b1f4 rm -f lwresd before trying to link it to named in the install target. 2000-06-28 02:54:55 +00:00
Jim Reid
1b32c4783f minor corrections to -n option description as recommended by Brian 2000-06-28 02:51:46 +00:00
Brian Wellington
57506ed769 Fix memory context leak. 2000-06-28 00:06:25 +00:00
Brian Wellington
a1f8303b1b don't print the configuration to stderr by default 2000-06-27 22:50:43 +00:00
Jim Reid
3b8403a20c first draft of man pages for lwresd and named 2000-06-27 21:49:15 +00:00
Michael Graff
4ecbc9c96f Don't use TCP for outgoing queries just because the client is TCP. 2000-06-26 21:42:33 +00:00
Brian Wellington
9a6bbb206e namespace cleanup 2000-06-26 20:50:00 +00:00
David Lawrence
a38e5f0695 278. [bug] bin/named/logconf.c:category_fromconf() didn't take 
note of when isc_log_categorybyname() wasn't able
                        to find the category name and would then apply the
                        channel list of the unknown category to all categories.
 2000-06-23 17:59:08 +00:00
Mark Andrews
b03a619e1d set AA in notify messages 2000-06-23 17:26:38 +00:00
Andreas Gustafsson
b92da7ece1 273. [func] The default for the 'transfer-format' option is 
now 'many-answers'.  This will break zone transfers
                        to BIND 4.9.5 and older unless there is an explicit
                        'one-answer' configuration.
 2000-06-23 01:34:38 +00:00
Andreas Gustafsson
26c86a6fc8 273. [func] The default for the 'transfer-format' option is 
now 'many-answers'.  This will break zone transfers
                        to BIND 4.9.5 and older unless there is an explicit
                        'one-answer' configuration.
 2000-06-23 01:08:29 +00:00
Mark Andrews
51eb7d0c5c uninitaliased variable 2000-06-22 23:48:07 +00:00
David Lawrence
18f2f93039 style lint 2000-06-22 23:04:27 +00:00
David Lawrence
aa900978da allow stderr channels to be configured 2000-06-22 22:30:12 +00:00
David Lawrence
9c3531d72a add RCS id string 2000-06-22 22:00:42 +00:00
Mark Andrews
06430b1f6c isc_mem_put(client->tcpbuf) not isc_mem_put(client->sendbuf); 2000-06-22 02:21:06 +00:00
David Lawrence
6dcde6ca36 update_copyrights 2000-06-22 01:27:11 +00:00
Brian Wellington
58620377da add lwresd 2000-06-22 01:25:19 +00:00
Andreas Gustafsson
b3157263ee 272. [bug] The sending of large TCP responses was canceled 
in mid-transmission due to a race condition
                        caused by the failure to set the client object's
                        newstate variable correctly when transitioning
                        to the working state.
 2000-06-22 01:14:38 +00:00
Brian Wellington
04e812723c If ns_g_cpus is 0, call isc_os_ncpus() to probe. 2000-06-22 01:09:14 +00:00
Brian Wellington
bc9515e5a2 Initialize ns_g_cpus to 0, not 1. 2000-06-22 01:08:54 +00:00
Mark Andrews
b35a009df8 270. [func] Allow maximum sized TCP answers. 2000-06-22 00:05:11 +00:00
Brian Wellington
165250c403 Move entropy and dispatchmgr create/destroy to more correct places. 2000-06-21 22:12:02 +00:00
Michael Graff
80617c8faa Add using an entropy source to generate a random query ID seed value. 2000-06-21 21:34:43 +00:00
Brian Wellington
567ba0ae19 Return LWRES_R_INCOMPLETE when there are aliases but no addresses. 2000-06-21 18:20:00 +00:00
Brian Wellington
208e3e410d lwresd bug fixes, command line updates, configurability stuff 2000-06-21 01:16:27 +00:00
Brian Wellington
9381314895 Return LWRES_R_NOTFOUND if a gnba lookup fails because the name isn't found. 2000-06-21 01:15:10 +00:00
David Lawrence
c05ebd0da7 removed some special files from the ignore list that are no longer generated 2000-06-20 23:45:08 +00:00
Brian Wellington
1eee03d8cf Use the -p port option to start lwresd on a different port 2000-06-19 22:30:11 +00:00
Brian Wellington
d195e2df32 Don't start omapi if running in lwresd mode 2000-06-19 22:29:09 +00:00
Brian Wellington
d5563fcd35 Remove lwresd before creating a link to named 2000-06-19 22:25:50 +00:00
Brian Wellington
c05abe6ef4 Added rules to link named to lwresd on 'make all' and 'make install' 2000-06-19 19:23:47 +00:00
Brian Wellington
593399a67a lwresd is no longer named -r, it's now a link 2000-06-19 18:55:46 +00:00
Michael Graff
7685c082c8 remove flags from source types. It was never used, and probably shouldn't be there. 2000-06-17 01:42:21 +00:00
Michael Graff
ca53839147 temp. change -- don't filter mcast yet 2000-06-16 18:10:44 +00:00
Brian Wellington
f6c700247a Failing to open/bind the lwresd socket should be a fatal error, since 
it's only attempted if the user explicitly calls named with -r.
 2000-06-16 07:42:41 +00:00
Brian Wellington
7777118507 (#260) Running named as a non-root user failed on Linux kernels new enough to 
support retaining capabilities after setuid().
 2000-06-16 07:35:54 +00:00
Brian Wellington
bb54e57a8e Fix shutdown problems associated with lwresd. 2000-06-16 07:21:13 +00:00