nsd 3.0.1 + chroot() = fail to write xfrdfile

dr. W.C.A. Wijngaards wouter at NLnetLabs.nl
Wed Sep 27 05:55:32 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Koh-ichi,

Yes you are right, I've treated xfrdfile like difffile is treated (in
nsd_options_create()). This saves work in other places. Changes are in
svn repository.

This then fixes chroot using default xfrdfile entry.

Best regards,
   Wouter

Koh-ichi Ito wrote:
> Hello,
> 
> Excuse my carelessness. My fix was not enough.
> 
> I only examined my fix on the condition nsd.conf has
> "xfrdfile:" entry. On this case, my fix works fine. But
> without "xfrdfile:" entry, the value relies on the compile
> time default. On this case, the assignment
> 
>         if(!statefile) 
>                 statefile = XFRDFILE;
> 
> is done on xfrd-disk.c::xfrd_write_state(), so pathname of
> chroot() jail is not stripped from XFRDFILE.
> 
> By the brute-force tactics, do same process on
> xfrd_write_state() may help, but it may not elegant way.
> 
> Speak on DIFFFILE, the default value of "difffile:", the
> assignment of default value is done on
> options.c::nsd_options_create(), so it seems not to involved
> the issue.
> 
> Regards,
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFFGhJUkDLqNwOhpPgRAi9cAJ9OcJfvIpUM2oCcsDzu1adGKV5e6wCfVslQ
98LT6JN5Fed/gS39jnZl/l4=
=R8YU
-----END PGP SIGNATURE-----



More information about the nsd-users mailing list