upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-04-26 16:47:31 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Change statement->argument terminology for control channel

Browse source 
control { inet ... allow keys read-only }; are not actual statements
but in fact arguments of a statement. Remove .. namedconf:statement::
syntax to avoid collisions with other statements of the same name.
This commit is contained in:
Petr Špaček 2022-06-17 14:27:16 +02:00
parent 3233414a53
commit caf2675ef8
No known key found for this signature in database
GPG key ID: ABD587CDF06581AE
1 changed files with 9 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
doc/arm/reference.rst
View file

@ -484,24 +484,22 @@ and retrieve non-DNS results from a name server.
The ability to issue commands over the control channel is restricted by
the ``allow`` and ``keys`` clauses.
.. namedconf:statement:: allow
``allow``
Connections to the control channel
are permitted based on the ``address_match_list``. This is for simple IP
address-based filtering only; any ``key_id`` elements of the
``address_match_list`` are ignored.
.. namedconf:statement:: keys
``keys``
The primary authorization mechanism of the command channel is the
``key_list``, which contains a list of ``key_id``s. Each ``key_id`` in
the ``key_list`` is authorized to execute commands over the control
channel. See :ref:`admin_tools` for information about
configuring keys in :iscman:`rndc`.
The primary authorization mechanism of the command channel is the
``key_list``, which contains a list of ``key_id`` s. Each ``key_id`` in
the ``key_list`` is authorized to execute commands over the control
channel. See :ref:`admin_tools` for information about
configuring keys in :iscman:`rndc`.
.. namedconf:statement:: read-only
If the ``read-only`` clause is enabled, the control channel is limited
``read-only``
If the ``read-only`` argument is ``on``, the control channel is limited
to the following set of read-only commands: ``nta -dump``, ``null``,
``status``, ``showzone``, ``testgen``, and ``zonestatus``. By default,
``read-only`` is not enabled and the control channel allows read-write