|
 |
96cc1f |
From 9ad552df64b1de224e452d7d788f3b3473dbf945 Mon Sep 17 00:00:00 2001
|
|
|
96cc1f |
From: =?UTF-8?q?Nikola=20Forr=C3=B3?= <nforro@redhat.com>
|
|
|
96cc1f |
Date: Tue, 19 Jun 2018 14:00:17 +0200
|
|
|
96cc1f |
Subject: [PATCH] host.conf.5: remove description of never-implemented spoof
|
|
|
96cc1f |
options
|
|
|
96cc1f |
---
|
|
|
96cc1f |
man-pages/man5/host.conf.5 | 63 +-------------------------------------
|
|
|
96cc1f |
1 file changed, 1 insertion(+), 62 deletions(-)
|
|
|
96cc1f |
|
|
|
96cc1f |
diff --git a/man-pages/man5/host.conf.5 b/man-pages/man5/host.conf.5
|
|
|
96cc1f |
index c85fefe..3f24518 100644
|
|
|
96cc1f |
--- a/man-pages/man5/host.conf.5
|
|
|
96cc1f |
+++ b/man-pages/man5/host.conf.5
|
|
|
96cc1f |
@@ -33,7 +33,7 @@ contains configuration information specific to the resolver library.
|
|
|
96cc1f |
It should contain one configuration keyword per line, followed by
|
|
|
96cc1f |
appropriate configuration information.
|
|
|
96cc1f |
The keywords recognized are
|
|
|
96cc1f |
-.IR trim ", " multi ", " nospoof ", " spoof ", and " reorder .
|
|
|
96cc1f |
+.IR trim ", " multi ", and " reorder .
|
|
|
96cc1f |
These keywords are described below.
|
|
|
96cc1f |
.TP
|
|
|
96cc1f |
.I trim
|
|
|
96cc1f |
@@ -68,52 +68,6 @@ This is
|
|
|
96cc1f |
by default, as it may cause a substantial performance loss at sites
|
|
|
96cc1f |
with large hosts files.
|
|
|
96cc1f |
.TP
|
|
|
96cc1f |
-.I nospoof
|
|
|
96cc1f |
-Valid values are
|
|
|
96cc1f |
-.IR on " and " off .
|
|
|
96cc1f |
-If set to
|
|
|
96cc1f |
-.IR on ,
|
|
|
96cc1f |
-the resolv+ library will attempt to prevent hostname spoofing to
|
|
|
96cc1f |
-enhance the security of
|
|
|
96cc1f |
-.BR rlogin " and " rsh .
|
|
|
96cc1f |
-It works as follows: after performing a host address lookup, resolv+
|
|
|
96cc1f |
-will perform a hostname lookup for that address.
|
|
|
96cc1f |
-If the two hostnames
|
|
|
96cc1f |
-do not match, the query will fail.
|
|
|
96cc1f |
-The default value is
|
|
|
96cc1f |
-.IR off .
|
|
|
96cc1f |
-.TP
|
|
|
96cc1f |
-.I spoofalert
|
|
|
96cc1f |
-Valid values are
|
|
|
96cc1f |
-.IR on " and " off .
|
|
|
96cc1f |
-If this option is set to
|
|
|
96cc1f |
-.I on
|
|
|
96cc1f |
-and the
|
|
|
96cc1f |
-.I nospoof
|
|
|
96cc1f |
-option is also set, resolv+ will log a warning of the error via the
|
|
|
96cc1f |
-syslog facility.
|
|
|
96cc1f |
-The default value is
|
|
|
96cc1f |
-.IR off .
|
|
|
96cc1f |
-.TP
|
|
|
96cc1f |
-.I spoof
|
|
|
96cc1f |
-Valid values are
|
|
|
96cc1f |
-.IR off ", " nowarn " and " warn .
|
|
|
96cc1f |
-If this option is set to
|
|
|
96cc1f |
-.IR off ,
|
|
|
96cc1f |
-spoofed addresses are permitted and no warnings will be emitted
|
|
|
96cc1f |
-via the syslog facility.
|
|
|
96cc1f |
-If this option is set to
|
|
|
96cc1f |
-.IR warn ,
|
|
|
96cc1f |
-resolv+ will attempt to prevent hostname spoofing to
|
|
|
96cc1f |
-enhance the security and log a warning of the error via the syslog
|
|
|
96cc1f |
-facility.
|
|
|
96cc1f |
-If this option is set to
|
|
|
96cc1f |
-.IR nowarn ,
|
|
|
96cc1f |
-the resolv+ library will attempt to prevent hostname spoofing to
|
|
|
96cc1f |
-enhance the security but not emit warnings via the syslog facility.
|
|
|
96cc1f |
-Setting this option to anything else is equal to setting it to
|
|
|
96cc1f |
-.IR nowarn .
|
|
|
96cc1f |
-.TP
|
|
|
96cc1f |
.I reorder
|
|
|
96cc1f |
Valid values are
|
|
|
96cc1f |
.IR on " and " off .
|
|
|
96cc1f |
@@ -135,15 +89,6 @@ override the behavior which is configured in
|
|
|
96cc1f |
If set this variable points to a file that should be read instead of
|
|
|
96cc1f |
.IR /etc/host.conf .
|
|
|
96cc1f |
.TP
|
|
|
96cc1f |
-.B RESOLV_SPOOF_CHECK
|
|
|
96cc1f |
-Overrides the
|
|
|
96cc1f |
-.IR nospoof ", " spoofalert " and " spoof
|
|
|
96cc1f |
-commands in the same way as the
|
|
|
96cc1f |
-.I spoof
|
|
|
96cc1f |
-command is parsed.
|
|
|
96cc1f |
-Valid values are
|
|
|
96cc1f |
-.IR off ", " nowarn " and " warn .
|
|
|
96cc1f |
-.TP
|
|
|
96cc1f |
.B RESOLV_MULTI
|
|
|
96cc1f |
Overrides the
|
|
|
96cc1f |
.I multi
|
|
|
96cc1f |
@@ -178,12 +123,6 @@ Resolver configuration file
|
|
|
96cc1f |
Local hosts database
|
|
|
96cc1f |
.SH NOTES
|
|
|
96cc1f |
The following differences exist compared to the original implementation.
|
|
|
96cc1f |
-A new command
|
|
|
96cc1f |
-.I spoof
|
|
|
96cc1f |
-and a new environment variable
|
|
|
96cc1f |
-.B RESOLV_SPOOF_CHECK
|
|
|
96cc1f |
-can take arguments like
|
|
|
96cc1f |
-.IR off ", " nowarn " and " warn .
|
|
|
96cc1f |
Line comments can appear anywhere and not only at the beginning of a line.
|
|
|
96cc1f |
.SH SEE ALSO
|
|
|
96cc1f |
.BR gethostbyname (3),
|
|
|
96cc1f |
--
|
|
|
96cc1f |
2.17.1
|
|
|
96cc1f |
|