diff options
| author | Rainer Gerhards <rgerhards@adiscon.com> | 2008-11-29 07:22:48 +0100 |
|---|---|---|
| committer | Rainer Gerhards <rgerhards@adiscon.com> | 2008-11-29 07:22:48 +0100 |
| commit | f0ddbed44c332391ae6d9bbf6b07e2f06c4dd676 (patch) | |
| tree | b6d2ba495ba6e6843ac1cd6be6f858783d2019d8 /runtime/net.h | |
| parent | ae5902a24483102840ad6c3d6ee3cb5d6e8df791 (diff) | |
| download | rsyslog-f0ddbed44c332391ae6d9bbf6b07e2f06c4dd676.tar.gz rsyslog-f0ddbed44c332391ae6d9bbf6b07e2f06c4dd676.tar.xz rsyslog-f0ddbed44c332391ae6d9bbf6b07e2f06c4dd676.zip | |
security bugfix: $AllowedSender was not honored,
...all senders were permitted instead
Diffstat (limited to 'runtime/net.h')
| -rw-r--r-- | runtime/net.h | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/runtime/net.h b/runtime/net.h index 0d36e824..092c3116 100644 --- a/runtime/net.h +++ b/runtime/net.h @@ -135,11 +135,11 @@ BEGINinterface(net) /* name must also be changed in ENDinterface macro! */ /* things to go away after proper modularization */ rsRetVal (*addAllowedSenderLine)(char* pName, uchar** ppRestOfConfLine); void (*PrintAllowedSenders)(int iListToPrint); - void (*clearAllowedSenders) (); + void (*clearAllowedSenders)(uchar*); void (*debugListenInfo)(int fd, char *type); int *(*create_udp_socket)(uchar *hostname, uchar *LogPort, int bIsServer); void (*closeUDPListenSockets)(int *finet); - int (*isAllowedSender)(struct AllowedSenders *pAllowRoot, struct sockaddr *pFrom, const char *pszFromHost); + int (*isAllowedSender)(uchar *pszType, struct sockaddr *pFrom, const char *pszFromHost); rsRetVal (*getLocalHostname)(uchar**); int (*should_use_so_bsdcompat)(void); /* permitted peer handling should be replaced by something better (see comments above) */ @@ -149,9 +149,6 @@ BEGINinterface(net) /* name must also be changed in ENDinterface macro! */ /* data members - these should go away over time... TODO */ int *pACLAddHostnameOnFail; /* add hostname to acl when DNS resolving has failed */ int *pACLDontResolve; /* add hostname to acl instead of resolving it to IP(s) */ - struct AllowedSenders *pAllowedSenders_UDP; - struct AllowedSenders *pAllowedSenders_TCP; - struct AllowedSenders *pAllowedSenders_GSS; ENDinterface(net) #define netCURR_IF_VERSION 4 /* increment whenever you change the interface structure! */ |