2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00

2963. [security] The allow-query acl was being applied instead of the

allow-query-cache acl to cache lookups. [RT #22114]
This commit is contained in:
Mark Andrews
2010-09-24 05:09:03 +00:00
parent 02f42ed1d9
commit ed83fa75f5
9 changed files with 82 additions and 51 deletions

View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: client.c,v 1.268 2010/09/13 23:46:58 tbox Exp $ */
/* $Id: client.c,v 1.269 2010/09/24 05:09:02 marka Exp $ */
#include <config.h>
@@ -1865,13 +1865,13 @@ client_request(isc_task_t *task, isc_event_t *event) {
client->view->recursionacl,
ISC_TRUE) == ISC_R_SUCCESS &&
ns_client_checkaclsilent(client, NULL,
client->view->queryacl,
client->view->cacheacl,
ISC_TRUE) == ISC_R_SUCCESS &&
ns_client_checkaclsilent(client, &client->destaddr,
client->view->recursiononacl,
ISC_TRUE) == ISC_R_SUCCESS &&
ns_client_checkaclsilent(client, &client->destaddr,
client->view->queryonacl,
client->view->cacheonacl,
ISC_TRUE) == ISC_R_SUCCESS)
ra = ISC_TRUE;