Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #18930 from pprindeville/isc-dhcp-drop-allow-update

Browse source 
isc-dhcp: don't use allow-update in bind config
This commit is contained in:
Philip Prindeville 2022-07-27 10:07:07 -06:00 committed by GitHub
commit 3115c16fdc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
net/isc-dhcp/files/dhcpd.init
View file

@ -465,10 +465,11 @@ general_config() {
cat <<EOF > $conf_local_file cat <<EOF > $conf_local_file
zone "$domain" { zone "$domain" {
type master; type master;
file "$dyndir/db.$domain"; file "$dyndir/db.$domain";
allow-update { key $session_key_name; }; update-policy {
allow-transfer { key $session_key_name; }; grant $session_key_name zonesub any;
};
}; };
EOF EOF
@ -477,10 +478,11 @@ EOF
mynet="$(rev_str "$mynet" ".")" mynet="$(rev_str "$mynet" ".")"
cat <<EOF >> $conf_local_file cat <<EOF >> $conf_local_file
zone "$mynet.in-addr.arpa" { zone "$mynet.in-addr.arpa" {
type master; type master;
file "$dyndir/db.$mynet.in-addr.arpa"; file "$dyndir/db.$mynet.in-addr.arpa";
allow-update { key $session_key_name; }; update-policy {
allow-transfer { key $session_key_name; }; grant $session_key_name zonesub any;
};
}; };
EOF EOF
@ -504,7 +506,7 @@ include "$session_key_file";
zone $domain. { zone $domain. {
primary 127.0.0.1; primary 127.0.0.1;
key local-ddns; key $session_key_name;
} }
EOF EOF
@ -514,7 +516,7 @@ EOF
cat <<EOF cat <<EOF
zone $mynet.in-addr.arpa. { zone $mynet.in-addr.arpa. {
primary 127.0.0.1; primary 127.0.0.1;
key local-ddns; key $session_key_name;
} }
EOF EOF