Public bug reported:

Binary package hint: sysklogd

sysklogd-1.4.1-20ubuntu4

While I would assume that the "-x" switch was removed from the Ubuntu version 
of syslogd because of the resulting denial-of-service vulnerability - see, for 
instance,
 
http://arachnids.stillsecure.com/SAT/scripts/OSSSA/GPL/released/OSSSA/scripts/os2a_linux_syslogd_dos_601575.nasl
 - it does NOT follow that syslogd should crash when given the traditional "-x" 
switch.  Instead, the "-x" switch should be ignored, or should cause a message 
to issue about the default behaviour of syslogd.  Some people may even want a 
new switch to _force_ name lookups when receiving remote messages.

Further, the man page has been "censored" instead of updated with
respect to the "-x" switch.  The sysklogd man page should say that the
"-x" switch will be ignored and that the default behaviour of syslogd is
to disable name lookups when receiving remote messages.  The man page
should also say if the "-x" switch will be ignored silently, or if a
message will be issued.

** Affects: sysklogd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
syslogd fails to run with "-x" switch
https://bugs.launchpad.net/bugs/131617
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to