glibc40/eglibc-mandriva-nscd-no-host-cache.patch

16 lines
720 B
Diff

diff -p -up glibc-2.9/nscd/nscd.conf.orig glibc-2.9/nscd/nscd.conf
--- glibc-2.9/nscd/nscd.conf.orig 2007-11-05 19:50:48.000000000 -0500
+++ glibc-2.9/nscd/nscd.conf 2009-01-15 09:56:22.000000000 -0500
@@ -60,7 +60,11 @@
max-db-size group 33554432
auto-propagate group yes
- enable-cache hosts yes
+# !!!!!WARNING!!!!! Host cache is insecure!!! The mechanism in nscd to
+# cache hosts will cause your local system to not be able to trust
+# forward/reverse lookup checks. DO NOT USE THIS if your system relies on
+# this sort of security mechanism. Use a caching DNS server instead.
+ enable-cache hosts no
positive-time-to-live hosts 3600
negative-time-to-live hosts 20
suggested-size hosts 211