Date: Thu, 29 Jan 2009 21:04:45 -0500 (EST) From: George Mitchell <george@m5p.com> To: FreeBSD-gnats-submit@FreeBSD.org Subject: bin/131143: amd causes annoying "embedded slash in map name" message Message-ID: <200901300204.n0U24jjH010554@m5p.com> Resent-Message-ID: <200901300210.n0U2A25d079600@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 131143 >Category: bin >Synopsis: amd causes annoying "embedded slash in map name" message >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Jan 30 02:10:02 UTC 2009 >Closed-Date: >Last-Modified: >Originator: George Mitchell >Release: FreeBSD 7.0-RELEASE i386 >Organization: >Environment: System: FreeBSD parkstreet.m5p.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 >Description: An out-of-the-box FreeBSD installation with amd enabled will generate two system log messages of the form "embedded slash in map name "/etc/amd.map" -- possible spoof attempt from nn.nn.nn.nn:773". >How-To-Repeat: Install FreeBSD 6.x or 7.x. Add the line "amd_enable="YES"" to /etc/rc.conf. >Fix: The default flags specify a map of /etc/amd.map for /host and /net. With no further configuration options, amd will try to interpret /etc/amd.map as an NIS map name before trying to interpret it as a plain file name. To fix the problem, patch /usr/src/contrib/amd/amd/mapc.c to move the "file" map type entry in maptypes before the NIS+ and NIS map type entries: --- contrib/amd/amd/mapc.c.orig 2008-01-29 22:18:49.000000000 -0500 +++ contrib/amd/amd/mapc.c 2009-01-29 20:54:07.000000000 -0500 @@ -224,6 +224,17 @@ error_mtime, MAPC_ROOT }, +#ifdef HAVE_MAP_FILE + { + "file", + file_init_or_mtime, + file_reload, + NULL, /* isup function */ + file_search, + file_init_or_mtime, + MAPC_ALL + }, +#endif /* HAVE_MAP_FILE */ #ifdef HAVE_MAP_PASSWD { "passwd", @@ -301,17 +312,6 @@ MAPC_INC }, #endif /* HAVE_MAP_NDBM */ -#ifdef HAVE_MAP_FILE - { - "file", - file_init_or_mtime, - file_reload, - NULL, /* isup function */ - file_search, - file_init_or_mtime, - MAPC_ALL - }, -#endif /* HAVE_MAP_FILE */ #ifdef HAVE_MAP_EXEC { "exec", >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200901300204.n0U24jjH010554>