bin/96993: [nis] /var/yp/securenets does not function in ypbind on 6.0 and 5.3

[Maxim Konovalov]

The following reply was made to PR bin/96993; it has been noted by GNATS.

From: Maxim Konovalov <maxim at macomnet.ru>
To: Hokan <hokan at me.umn.edu>
Cc: bug-followup at freebsd.org
Subject: Re: bin/96993: [nis] /var/yp/securenets does not function in ypbind
 on 6.0 and 5.3
Date: Tue, 13 Jun 2006 01:19:48 +0400 (MSD)

 On Mon, 12 Jun 2006, 16:12-0500, Hokan wrote:
 
 > On Mon, Jun 12, 2006 at 11:42:57PM +0400, Maxim Konovalov wrote:
 > > On Mon, 12 Jun 2006, 18:50-0000, Hokan wrote:
 > >
 > > >  This has been addressed in FreeBSD Security Advisory
 > > >  FreeBSD-SA-06:15.ypserv but further testing here has shown that the
 > > >  fix was not completely correct (although the security problem was
 > > >  stopped).
 > > >
 > > >  We have been having performance concerns with ypserv and
 > > >  decided to try compiling without tcpwrappers support.  This
 > > >  should be accomplished by modifying the Makefile to remove
 > > >  -DTCP_WRAPPER from CFLAGS:
 > > >
 > > >  -CFLAGS+= -DDB_CACHE -DTCP_WRAPPER -I.
 > > >  +CFLAGS+= -DDB_CACHE -I.
 > > >
 > > >  However, this no longer will compile after the security patch
 > > >  is applied.
 > > >
 > > >  The original version will compile and will use securenets.
 > > >  (The original version will not use securenets if tcpwrappers is
 > > >  enabled.)
 > >
 > > It does compile on my HEAD and RELENG_6 systems.
 >
 > The patch I had was apparently a beta version.  The official version
 > does seem to work.
 
 Could you please clarify - can we close this PR or there are still
 unresolved issues?
 
 -- 
 Maxim Konovalov