nsd 3.0.1 + chroot() = fail to write xfrdfile
dr. W.C.A. Wijngaards
wouter at NLnetLabs.nl
Wed Sep 27 05:55:32 UTC 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Koh-ichi,
Yes you are right, I've treated xfrdfile like difffile is treated (in
nsd_options_create()). This saves work in other places. Changes are in
svn repository.
This then fixes chroot using default xfrdfile entry.
Best regards,
Wouter
Koh-ichi Ito wrote:
> Hello,
>
> Excuse my carelessness. My fix was not enough.
>
> I only examined my fix on the condition nsd.conf has
> "xfrdfile:" entry. On this case, my fix works fine. But
> without "xfrdfile:" entry, the value relies on the compile
> time default. On this case, the assignment
>
> if(!statefile)
> statefile = XFRDFILE;
>
> is done on xfrd-disk.c::xfrd_write_state(), so pathname of
> chroot() jail is not stripped from XFRDFILE.
>
> By the brute-force tactics, do same process on
> xfrd_write_state() may help, but it may not elegant way.
>
> Speak on DIFFFILE, the default value of "difffile:", the
> assignment of default value is done on
> options.c::nsd_options_create(), so it seems not to involved
> the issue.
>
> Regards,
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iD8DBQFFGhJUkDLqNwOhpPgRAi9cAJ9OcJfvIpUM2oCcsDzu1adGKV5e6wCfVslQ
98LT6JN5Fed/gS39jnZl/l4=
=R8YU
-----END PGP SIGNATURE-----
More information about the nsd-users
mailing list