mirror of
https://git.yoctoproject.org/poky
synced 2026-07-27 19:37:10 +00:00
wangmy
b55297c679
Changelog: ========== [security] Fix a crash in DNS-over-HTTPS (DoH) code caused by premature TLS stream socket object deletion. (CVE-2022-1183) [GL #3216] [bug] RPZ NSIP and NSDNAME rule processing didn't handle stub and static-stub zones at or above the query name. This has now been addressed. [GL #3232] Fixed a deadlock that could occur if an rndc connection arrived during the shutdown of network interfaces. [GL #3272] Refactor the fctx_done() function to set fctx to NULL after detaching, so that reference counting errors will be easier to avoid. [GL #2969] udp_recv() in dispatch could trigger an INSIST when the callback's result indicated success but the response was canceled in the meantime. [GL #3300] Work around a jemalloc quirk which could trigger an out-of-memory condition in named over time. [GL #3287] If there was a pending negative cache DS entry, validations depending upon it could fail. [GL #3279] dig returned a 0 exit status on UDP connection failure. [GL #3235] Fix an assertion failure when using dig with +nssearch and +tcp options by starting the next query in the send_done() callback (like in the UDP mode) instead of doing that recursively in start_tcp(). Also ensure that queries interrupted while connecting are detached properly. [GL #3144] Don't remove CDS/CDNSKEY DELETE records on zone sign when using 'auto-dnssec maintain;'. [GL #2931] [contrib] Avoid name space collision in dlz modules by prefixing functions with 'dlz_'. [GL !5778] dlz: Add FALLTHROUGH and UNREACHABLE macros. [GL #3306] [func] Add new named command-line option -C to print built-in defaults. [GL #1326] Introduce the concept of broken catalog zones described in the DNS catalog zones draft version 5 document. [GL #3224] Add DNS Extended Errors when stale answers are returned from cache. [GL #2267] Implement support for catalog zones change of ownership (coo) mechanism described in the DNS catalog zones draft version 5 document. [GL #3223] Implement support for catalog zones options new syntax based on catalog zones custom properties with "ext" suffix described in the DNS catalog zones draft version 5 document. [GL #3222] Implement reference counting for TLS contexts and allow reloading of TLS certificates on reconfiguration without destroying the underlying TCP listener sockets for TLS-based DNS transports. [GL #3122] Add support for remote TLS certificates verification, both to BIND and dig, making it possible to implement Strict and Mutual TLS authentication, as described in RFC 9103, Section 9.3. [GL #3163] [cleanup] Remove use of exclusive mode in ns_interfacemgr in favor of rwlocked access to localhost and localnets members of dns_aclenv_t structure. [GL #3229] Remove the task exclusive mode use in ns_clientmgr. [GL #3230] (From OE-Core rev: d2ae8b85c71be2e9e332b1ef0a2d3083b30c63e6) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
43 lines
997 B
Diff
43 lines
997 B
Diff
bind: make "/etc/init.d/bind stop" work
|
|
|
|
Upstream-Status: Inappropriate [configuration]
|
|
|
|
Add some configurations, make rndc command be able to controls
|
|
the named daemon.
|
|
|
|
Signed-off-by: Roy Li <rongqing.li@windriver.com>
|
|
---
|
|
conf/named.conf | 5 +++++
|
|
conf/rndc.conf | 5 +++++
|
|
2 files changed, 10 insertions(+), 0 deletions(-)
|
|
create mode 100644 conf/rndc.conf
|
|
|
|
diff --git a/conf/named.conf b/conf/named.conf
|
|
index 95829cf..c8899e7 100644
|
|
--- a/conf/named.conf
|
|
+++ b/conf/named.conf
|
|
@@ -47,3 +47,8 @@ zone "255.in-addr.arpa" {
|
|
// root-delegation-only exclude { "DE"; "MUSEUM"; };
|
|
|
|
include "/etc/bind/named.conf.local";
|
|
+include "/etc/bind/rndc.key" ;
|
|
+controls {
|
|
+ inet 127.0.0.1 allow { localhost; }
|
|
+ keys { rndc-key; };
|
|
+};
|
|
diff --git a/conf/rndc.conf b/conf/rndc.conf
|
|
new file mode 100644
|
|
index 0000000..a0b481d
|
|
--- /dev/null
|
|
+++ b/conf/rndc.conf
|
|
@@ -0,0 +1,5 @@
|
|
+include "/etc/bind/rndc.key";
|
|
+options {
|
|
+ default-server localhost;
|
|
+ default-key rndc-key;
|
|
+};
|
|
|
|
--
|
|
1.7.5.4
|
|
|