Subject: CVS commit: basesrc
To: None <source-changes@netbsd.org>
From: Chris G. Demetriou <cgd@netbsd.org>
List: source-changes
Date: 06/25/2000 18:27:54
Module Name: basesrc
Committed By: cgd
Date: Mon Jun 26 01:27:53 UTC 2000
Modified Files:
basesrc/usr.sbin/portmap [netbsd-1-4]: portmap.c
Log Message:
pull up rev 1.25 from trunk (requested by sommerfeld):
Fix a hole in the portmap libwrap access control. The new code
disallows all indirect calls to the portmapper except for
PMAPPROC_NULL unless the -i (insecure) flag has been specified.
While there, add a new flag, -p (paranoid) which also disallows
indirect calls to a small number of other services, including
key parts of NFS and NIS.
To generate a diff of this commit:
cvs rdiff -r1.19 -r1.19.2.1 basesrc/usr.sbin/portmap/portmap.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.