Dirk Mueller
1abcad9219
- Add 0006-don-t-use-svc_fdset.patch: don't use the svc_fdset
interface for libtirpc, which is limited to 1024 connections.
- Sync with current git:
- Replace 0002-revert-auth.patch with
0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
- Add 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
to fix problems with activation via sockets by systemd
- Replace 0032-CVE-2015-7236.patch with
0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
- Add 0005-security.c-removed-warning.patch to fix compiler warnings
- Temporary remove 099-poll.patch
- Disable 0030-systemd-fix-rmtcall.patch, needs the other disabled
patches.
- Submit for SLE12SP2 [FATE#320393]
- Add patch 0032-CVE-2015-7236.patch to fix a segfault on certain
remote scans [CVE-2015-7236, bsc#940191, bsc#946204]
- Document how to restrict addresses that rpcbind will listen on
[bsc#935102]
Added 0031-rpcbind-manpage.patch
- Add patch 0030-systemd-fix-rmtcall.patch to fix rmtcall
forwarding (bnc#932423)
OBS-URL: https://build.opensuse.org/request/show/360882
OBS-URL: https://build.opensuse.org/package/show/network/rpcbind?expand=0&rev=58
53 lines
1.3 KiB
Diff
53 lines
1.3 KiB
Diff
De-emphasize the -h option and refer people to systemd instead
|
|
|
|
---
|
|
man/rpcbind.8 | 34 ++++++++++++++--------------------
|
|
1 file changed, 14 insertions(+), 20 deletions(-)
|
|
|
|
Index: rpcbind-0.2.1_rc4/man/rpcbind.8
|
|
===================================================================
|
|
--- rpcbind-0.2.1_rc4.orig/man/rpcbind.8
|
|
+++ rpcbind-0.2.1_rc4/man/rpcbind.8
|
|
@@ -86,27 +86,21 @@ checks are shown in detail.
|
|
Do not fork and become a background process.
|
|
.It Fl h
|
|
Specify specific IP addresses to bind to for UDP requests.
|
|
-This option
|
|
-may be specified multiple times and is typically necessary when running
|
|
-on a multi-homed host.
|
|
-If no
|
|
-.Fl h
|
|
-option is specified,
|
|
-.Nm
|
|
-will bind to
|
|
-.Dv INADDR_ANY ,
|
|
-which could lead to problems on a multi-homed host due to
|
|
+This option may be specified multiple times and can be used to
|
|
+restrict the interfaces rpcbind will respond to.
|
|
+Note that when
|
|
.Nm
|
|
-returning a UDP packet from a different IP address than it was
|
|
-sent to.
|
|
-Note that when specifying IP addresses with
|
|
-.Fl h ,
|
|
-.Nm
|
|
-will automatically add
|
|
-.Li 127.0.0.1
|
|
-and if IPv6 is enabled,
|
|
-.Li ::1
|
|
-to the list.
|
|
+is controlled via systemd's socket activation,
|
|
+the
|
|
+.Fl h
|
|
+option is ignored. In this case, you need to edit
|
|
+the
|
|
+.Nm ListenStream
|
|
+and
|
|
+.Nm ListenDgram
|
|
+definitions in
|
|
+.Nm /usr/lib/systemd/system/rpcbind.socket
|
|
+instead.
|
|
.It Fl i
|
|
.Dq Insecure
|
|
mode.
|