system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-10-15 21:05:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Enable TCP_WRAPPERs for the NIS server. The protection afforded is

Browse source 
not massive, but usable.
This commit is contained in:
Mark Murray 2002-02-06 20:39:36 +00:00
parent 4ad88f2ca4
commit adb79039fd
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=90319
2 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
etc/hosts.allow
View file

@ -63,6 +63,12 @@ rpcbind : 192.0.2.32/255.255.255.224 : allow
rpcbind : 192.0.2.96/255.255.255.224 : allow
rpcbind : ALL : deny
# NIS master server. Only local nets should have access
ypserv : localhost : allow
ypserv : .unsafe.my.net.example.com : deny
ypserv : .my.net.example.com : allow
ypserv : ALL : deny
# Provide a small amount of protection for ftpd
ftpd : localhost : allow
ftpd : .nice.guy.example.com : allow

5
usr.sbin/ypserv/Makefile
View file

@ -8,7 +8,10 @@ MAN= ypserv.8 ypinit.8
SRCS= yp_svc.c yp_server.c yp_dblookup.c yp_dnslookup.c \
ypxfr_clnt.c yp.h yp_main.c yp_error.c yp_access.c yp_svc_udp.c
CFLAGS+= -I. -DDB_CACHE
DPADD= ${LIBWRAP}
LDADD= -lwrap
CFLAGS+= -I. -DDB_CACHE -DTCP_WRAPPER
CLEANFILES= yp_svc.c ypxfr_clnt.c yp.h