update good_client() to support daemon@host pattern in hosts_access code.

Bug #178522 reported by glance
4
Affects Status Importance Assigned to Milestone
portmap (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Binary package hint: portmap

The hosts_access system (tcpwrappers) have support for daemon@host rules in the config-files (hosts.allow, hosts.deny). I was looking at the concept of making site-wide versions of those files and spotted that the code in both portmap and mountd doens't support this. They both use the simplified call called hosts_ctl. This isn't mentioned anywere and the only way i was able to figure out why things went wrong was to read the source.

My sugestion is to rewrite the good_client function to be able to send a servername to the hosts_* functions to be able to write those kind of rules. In every case at least the ip-adress the connection came in to. On the point of hostnames, just read the #ifdef USE_DNS and implement the same here.

At least the manpages shall be updated to write about this thingie. One good thing to allso write there is about the need to use ip-adresses for clients, see USE_DNS note in the code for info.

Someone that can handle launchpad modify this bug to allso include the mountd program (source nfs-utils). It have the same artifacts as described here for portmap.

//Anton

Revision history for this message
Andreas Moog (ampelbein) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. You reported this bug a while ago and there hasn't been any activity in it recently. We were wondering is this still an issue for you? Can you try with latest Ubuntu release? Thanks in advance.

Changed in portmap:
assignee: nobody → andreas-moog
status: New → Incomplete
Revision history for this message
glance (glance-acc) wrote :

Its still a problem, because nothing has happend to the relevant piece of code.

Andreas Moog (ampelbein)
Changed in portmap:
assignee: andreas-moog → nobody
status: Incomplete → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.