mirror of
git://slackware.nl/current.git
synced 2024-12-28 09:59:53 +01:00
69753b9a1d
ap/sudo-1.9.15-x86_64-1.txz: Upgraded.
The sudoers plugin has been modified to make it more resilient to ROWHAMMER
attacks on authentication and policy matching.
The sudoers plugin now constructs the user time stamp file path name using
the user-ID instead of the user name. This avoids a potential problem with
user names that contain a path separator ('/') being interpreted as part of
the path name.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-42465
https://www.cve.org/CVERecord?id=CVE-2023-42456
(* Security fix *)
ap/vim-9.0.2092-x86_64-1.txz: Upgraded.
l/libuv-1.47.0-x86_64-1.txz: Upgraded.
l/xapian-core-1.4.24-x86_64-1.txz: Upgraded.
n/bind-9.18.19-x86_64-2.txz: Rebuilt.
Don't go automatically chowning files in /var/named, since some users may
have special requirements. But in case anyone finds that behavior useful,
you may set NAMED_CHOWN=YES in /etc/default/named to turn it back on.
Unless anyone has a good objection to it, this change is considered pending
for the next BIND upgrades in -stable.
Thanks to Mig21.
xap/vim-gvim-9.0.2092-x86_64-1.txz: Upgraded.
24 lines
1 KiB
Text
24 lines
1 KiB
Text
# User to run named as:
|
|
NAMED_USER=named
|
|
|
|
# Group to use for named related files and directories.
|
|
# By default, named will also run as the primary group of $NAMED_USER,
|
|
# which will usually be the same as what's listed below, but not
|
|
# necessarily if something other than the default of "named" is used.
|
|
NAMED_GROUP=named
|
|
|
|
# Options to run named with. At least -u $NAMED_USER is required, but
|
|
# additional options may be added if needed.
|
|
NAMED_OPTIONS="-u $NAMED_USER"
|
|
|
|
# If this is set to YES, then before starting named the startup script
|
|
# will make sure that /etc/rndc.key (if it exists) and the enitre contents
|
|
# of /var/named are chowned to $NAMED_USER:$NAMED_GROUP. If some of these
|
|
# files are improperly owned, named will refuse to start or may now work
|
|
# properly. This is also a useful setting when upgrading from an older BIND
|
|
# package that would run as root.
|
|
#
|
|
# If NAMED_CHOWN is set to anything else (or is unset), then these files
|
|
# will not be chowned automatically and the admin will handle any required
|
|
# file ownerships.
|
|
NAMED_CHOWN=NO
|