From ee89af66cc57a428b45b09d5f72cf1841af42187 Mon Sep 17 00:00:00 2001 From: Thomas Markwalder Date: Fri, 23 May 2025 14:36:30 -0400 Subject: [PATCH] [#3902] More typos modified: doc/sphinx/arm/agent.rst modified: doc/sphinx/arm/ddns.rst modified: doc/sphinx/arm/dhcp4-srv.rst modified: doc/sphinx/arm/dhcp6-srv.rst modified: doc/sphinx/arm/security.rst modified: src/bin/agent/ca_messages.mes modified: src/lib/d2srv/d2_messages.mes modified: src/lib/util/filesystem.cc modified: src/lib/util/filesystem.h --- doc/sphinx/arm/agent.rst | 2 +- doc/sphinx/arm/ddns.rst | 2 +- doc/sphinx/arm/dhcp4-srv.rst | 2 +- doc/sphinx/arm/dhcp6-srv.rst | 2 +- doc/sphinx/arm/security.rst | 2 +- src/bin/agent/ca_messages.mes | 2 +- src/lib/d2srv/d2_messages.mes | 2 +- src/lib/util/filesystem.cc | 2 +- src/lib/util/filesystem.h | 2 +- 9 files changed, 9 insertions(+), 9 deletions(-) diff --git a/doc/sphinx/arm/agent.rst b/doc/sphinx/arm/agent.rst index 9463cc184b..090ba1ac7c 100644 --- a/doc/sphinx/arm/agent.rst +++ b/doc/sphinx/arm/agent.rst @@ -286,7 +286,7 @@ Starting and Stopping the Control Agent $ strings src/lib/process/cfgrpt/.libs/libcfgrpt.a | sed -n 's/;;;; //p' - ``-X`` - As of Kea 3.0, disables path and permissions restrictions. - The server will emit a warning at startup that sercurity restrctions + The server will emit a warning at startup that sercurity restrictions have been disabled. Do not use this mode of operation without careful consideration and taking any necessary precautions. Failure to do so can expose deployments to security vulnerabilities. For more information diff --git a/doc/sphinx/arm/ddns.rst b/doc/sphinx/arm/ddns.rst index 25c3552d5e..43e8702c45 100644 --- a/doc/sphinx/arm/ddns.rst +++ b/doc/sphinx/arm/ddns.rst @@ -164,7 +164,7 @@ directly. It accepts the following command-line switches: $ strings src/lib/process/cfgrpt/.libs/libcfgrpt.a | sed -n 's/;;;; //p' - ``-X`` - As of Kea 3.0, disables path and permissions restrictions. - The server will emit a warning at startup that sercurity restrctions + The server will emit a warning at startup that sercurity restrictions have been disabled. Do not use this mode of operation without careful consideration and taking any necessary precautions. Failure to do so can expose deployments to security vulnerabilities. For more information diff --git a/doc/sphinx/arm/dhcp4-srv.rst b/doc/sphinx/arm/dhcp4-srv.rst index 65677fd7c8..8eb5335b25 100644 --- a/doc/sphinx/arm/dhcp4-srv.rst +++ b/doc/sphinx/arm/dhcp4-srv.rst @@ -79,7 +79,7 @@ the following command-line switches: $ strings src/lib/process/cfgrpt/.libs/libcfgrpt.a | sed -n 's/;;;; //p' - ``-X`` - As of Kea 3.0, disables path and permissions restrictions. - The server will emit a warning at startup that sercurity restrctions + The server will emit a warning at startup that sercurity restrictions have been disabled. Do not use this mode of operation without careful consideration and taking any necessary precautions. Failure to do so can expose deployments to security vulnerabilities. For more information diff --git a/doc/sphinx/arm/dhcp6-srv.rst b/doc/sphinx/arm/dhcp6-srv.rst index 8c60bedfc5..d38b9811a8 100644 --- a/doc/sphinx/arm/dhcp6-srv.rst +++ b/doc/sphinx/arm/dhcp6-srv.rst @@ -79,7 +79,7 @@ the following command-line switches: $ strings src/lib/process/cfgrpt/.libs/libcfgrpt.a | sed -n 's/;;;; //p' - ``-X`` - As of Kea 3.0, disables path and permissions restrictions. - The server will emit a warning at startup that sercurity restrctions + The server will emit a warning at startup that sercurity restrictions have been disabled. Do not use this mode of operation without careful consideration and taking any necessary precautions. Failure to do so can expose deployments to security vulnerabilities. For more information diff --git a/doc/sphinx/arm/security.rst b/doc/sphinx/arm/security.rst index 87e63f3be9..aa4a055a50 100644 --- a/doc/sphinx/arm/security.rst +++ b/doc/sphinx/arm/security.rst @@ -431,7 +431,7 @@ the following table: As of Kea 3.0, the path and permissions restrictions may be disabled by adding ``-X`` to command line of the Kea servers. The server will emit a warning at startup that - sercurity restrctions have been disabled. Do not use this mode of operation without + sercurity restrictions have been disabled. Do not use this mode of operation without careful consideration and taking any necessary precautions. Failure to do so may expose deployments to security vulnerabilities. This command line option is supported by all of the daemons: ``kea-dhcp4``, ``kea-dhcp6``, ``kea-dhcp-ddns``, and diff --git a/src/bin/agent/ca_messages.mes b/src/bin/agent/ca_messages.mes index 92671461c2..b0e8adc135 100644 --- a/src/bin/agent/ca_messages.mes +++ b/src/bin/agent/ca_messages.mes @@ -87,5 +87,5 @@ This warning is emitted when internal security checks normally performed by kea-ctrl-agent have been disabled via command line opion '-X'. This means the server is not enforcing restrictions on resource paths or permissions. This mode of operation may expose your -environment to ecurity vulnerabilities and should only be used +environment to security vulnerabilities and should only be used after consideration. diff --git a/src/lib/d2srv/d2_messages.mes b/src/lib/d2srv/d2_messages.mes index c9ac59a7b4..c3b3c42f81 100644 --- a/src/lib/d2srv/d2_messages.mes +++ b/src/lib/d2srv/d2_messages.mes @@ -453,5 +453,5 @@ This warning is emitted when internal security checks normally performed by kea-dhcp-ddns have been disabled via command line opion '-X'. This means the server is not enforcing restrictions on resource paths or permissions. This mode of operation may expose your -environment to ecurity vulnerabilities and should only be used +environment to security vulnerabilities and should only be used after consideration. diff --git a/src/lib/util/filesystem.cc b/src/lib/util/filesystem.cc index 50c2088082..6d729b9a06 100644 --- a/src/lib/util/filesystem.cc +++ b/src/lib/util/filesystem.cc @@ -327,7 +327,7 @@ PathChecker::validateDirectory(const std::string input_path_str, bool PathChecker::pathHasPermissions(mode_t permissions, bool enforce_perms - /* = PathChecker::shouldEnforceSecurity() */) const { + /* = PathChecker::shouldEnforceSecurity() */) const { return((!enforce_perms) || hasPermissions(path_, permissions)); } diff --git a/src/lib/util/filesystem.h b/src/lib/util/filesystem.h index 9c1d6896ba..16f8bf096d 100644 --- a/src/lib/util/filesystem.h +++ b/src/lib/util/filesystem.h @@ -267,7 +267,7 @@ public: bool isDefaultOverridden(); /// @brief Indicates security checks should be enforced. - static bool shouldEnforceSecurity(); + static bool shouldEnforceSecurity(); /// @brief Enables or disables security enforcment checks. ///