upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-16 15:44:00 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
5832 commits 18 branches 854 tags 440 MiB
Commit graph

1977 commits

Author SHA1 Message Date
David Lawrence
5709b77c8c return non-zero if the rcodes differ 2000-07-08 16:37:43 +00:00
David Lawrence
c634c94d67 added "I:" info lines for each stage of the test 2000-07-08 16:37:18 +00:00
David Lawrence
45f0cd2b4b use full dig output; let digcomp sort it all out. in particular, digcomp 
really wants to get the server status.

also added "I:" info lines for each stage of the test
 2000-07-08 16:36:29 +00:00
David Lawrence
2dc34dc3de removed a.root-servers.nil A record as out of zone for .mil 2000-07-08 16:29:47 +00:00
David Lawrence
b575462ccb test that out-of-zone glue records are not returned 2000-07-08 16:29:05 +00:00
David Lawrence
d319a11e58 use full dig output so digcomp can get the server status response 2000-07-08 16:27:24 +00:00
Brian Wellington
66b84e8952 - test insecurity proofs 
- use digcomp.pl's ability to check rcode
- generate less unneeded output
- use separate output files for each test, so that output isn't deleted
 2000-07-08 00:39:17 +00:00
Brian Wellington
71954c9571 I lied. This should be the last change to the setuid() code. Call 
initgroups() from ns_os_inituserinfo, and make sure that Linux initially has
the CAP_SETGID capability set so that it doesn't fail.
 2000-07-08 00:12:21 +00:00
Brian Wellington
c336121fb5 Hopefully the last change to the setuid code. Only call initgroups() 
if getuid() == 0.  Don't call ns_os_changeuser() more than once (it
could happen on Linux).

The code in its current form doesn't check for root before calling
setgid() or setuid(), since they'll fail and print reasonable error
messages (unless -u is supplied with the non-root user that ran named,
in which case it would succeed).  The call to initgroups() would fail for
non root, so it shouldn't be tried.

The previous (as of a few days ago) code just ignored the -u parameter
when named was run as non-root.  This was not good.
 2000-07-07 23:53:35 +00:00
Andreas Gustafsson
722cac3cdc worked around NetBSD /bin/sh bug, making the 
script shorter in the process
 2000-07-07 23:18:51 +00:00
James Brister
475c936d4c 314. [func] Inet controls named.conf statement can now have 
any non-negative number of keys specified.
 2000-07-07 23:11:48 +00:00
Andreas Gustafsson
8d19e0443d worked around NetBSD /bin/sh bug, making the 
script shorter in the process
 2000-07-07 22:45:22 +00:00
Andreas Gustafsson
ed0a75d4a4 indentation and other style fixes; 
reindented (emacs users please (setq perl-indent 8))
 2000-07-07 22:43:45 +00:00
Andreas Gustafsson
eebcaeb6a0 added CNAME RR for RT #153 regression test 2000-07-07 22:33:20 +00:00
Brian Wellington
6ad837a1ad The rcode comparison check didn't work. It does now. 2000-07-07 22:13:21 +00:00
Brian Wellington
4e5388b459 Clean up the uid switching code again so that setgid() is called in 
ns_os_changeuser().
 2000-07-07 22:10:54 +00:00
Michael Sawyer
0f2fff1389 Print stat lines when needed. 
(This should be able to be safely pulled up.)
 2000-07-07 21:53:47 +00:00
Brian Wellington
1cc90f4ab4 Check that the rcodes in the 2 messages are the same 2000-07-07 21:43:49 +00:00
Brian Wellington
674a8f811e Don't die when lwres_conf_parse() returns failure. 2000-07-07 19:19:09 +00:00
Brian Wellington
1e8c2e72e7 remove extra spaces in I: lines 2000-07-07 18:25:20 +00:00
James Brister
952e9025b0 310. [func] Changes to named.conf "controls" statement (inet 
subtype only)

                          - support "keys" clause

                                controls {
                                   inet * port 1024
                                        allow { any; } keys { "foo"; }
                                }

                          - allow "port xxx" to be left out of statement,
                            in which case it defaults to omapi's default port
                            of 953.
 2000-07-07 13:56:14 +00:00
Brian Wellington
6c3bd0545a If the test timed out, R:FAIL was being printed twice, and the error 
message was missing the I: prefix.
 2000-07-07 07:15:04 +00:00
Brian Wellington
20e597d71c remove spaces from I: statements 2000-07-07 00:41:18 +00:00
Brian Wellington
d52cd4a9fa Properly fill in sa_family and sa_len (if present). Also fix a bug in 
test_noop (you'd really think a noop test would be bug free).
 2000-07-06 22:28:44 +00:00
Michael Sawyer
fec9cc90e6 Corrected cleanup 2000-07-06 19:54:02 +00:00
Michael Sawyer
03967f5ba6 Remove unneeded file 2000-07-06 19:46:20 +00:00
Michael Sawyer
f7b7a2448c use runall.sh and cleanall.sh 2000-07-06 19:40:57 +00:00
Michael Sawyer
2c65255baa Missing quotes 2000-07-06 19:37:47 +00:00
Michael Sawyer
ea1fabfe76 SUBDIRS entry corrected and brought up to date 2000-07-06 19:34:27 +00:00
Andreas Gustafsson
2c9fdfdfbe added script for running all system tests in sequence 2000-07-06 19:32:37 +00:00
Brian Wellington
b67a6d9657 If a zone is specified by the user, use it as the suffix for relative names. 2000-07-06 19:29:40 +00:00
Andreas Gustafsson
457a63f3b8 missing colon in glue_test rule 2000-07-06 04:36:55 +00:00
Andreas Gustafsson
770dd208fa work around NetBSD /bin/sh bug, with the side effect of making the 
test script shorter
 2000-07-06 02:33:42 +00:00
Brian Wellington
baeb4bcf32 In query_find(), if we're looking up a key and dns_db_find() returns 
DNS_R_DELEGATION, don't use the domain & ns set found by dns_db_find().
This means that a recursive server will not immediately ask the child zone
for a key set at the apex; the resolver will determine who to ask.
 2000-07-06 02:27:26 +00:00
Michael Sawyer
313b7db2ce Add NSUPDATE to conf.sh.in, not conf.sh... 2000-07-06 02:10:46 +00:00
Andreas Gustafsson
249763bcbf added glue test 2000-07-06 02:06:02 +00:00
Andreas Gustafsson
afb2c39d2d added glue test 2000-07-06 01:28:08 +00:00
Andreas Gustafsson
8993565982 if the file nsN/namedopts exists, use it to set named 
command line options
 2000-07-06 01:26:05 +00:00
Michael Sawyer
0819ae2ca5 Use limits.h/INT_MAX instead of the deprecated values.h/MAXINT 2000-07-06 01:02:42 +00:00
Michael Sawyer
c3c6770e53 Add nsupdate/ixfr test suite 2000-07-06 00:54:03 +00:00
Brian Wellington
61e7208704 memory leak 2000-07-05 23:42:08 +00:00
Michael Sawyer
38cf6e52ce Lots of style changes. 
Clean up what appears to be a varient of the race condition, this one set
off in nslookup.
 2000-07-05 23:28:32 +00:00
Brian Wellington
5ddea03e3e Log a message in addition to setting a failure code when kill -TERM doesn't 
kill a server.
 2000-07-05 23:28:07 +00:00
Brian Wellington
54b9dc7739 Add support for setting the server and/or zone 2000-07-05 23:24:18 +00:00
Andreas Gustafsson
4defd73fca This is "the glue fix". It changes the additional data lookup 
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
 2000-07-05 23:10:06 +00:00
Andreas Gustafsson
66465da5d1 work around NetBSD /bin/sh bug, with the side effect of making the 
test script shorter
 2000-07-05 22:13:56 +00:00
Andreas Gustafsson
c6ab6ca3fd moved linux_keepcaps() call and check for Linux nonroot caps back 
to earlier locations; use a separate boolean flag for keeping track of whether a
UID switch was requested rather than overloading the UID value zero
 2000-07-05 22:03:42 +00:00
Brian Wellington
58208669bc Should sleep for a while between kill -TERM and kill -KILL 2000-07-05 20:56:11 +00:00
Andreas Gustafsson
aade2614cb work around NetBSD /bin/sh bug, with the side effect of making the 
test script shorter
 2000-07-05 19:42:34 +00:00
Andreas Gustafsson
24139527f3 lots of style changes; no functional change 2000-07-05 19:31:26 +00:00