Bug ID: 874942
QA Contact: extras-qa(a)fedoraproject.org
External Bug URL: http://rt.cpan.org/Public/
Summary: Net-DNS: system configuration is used instead of
Story Points: ---
Mount Type: ---
External Bug ID: CPAN 67602
If I define my own configuration file, system files are used, which could be
security issue. Example: My configuration file is defined as: my $res =
Net::DNS::Resolver->new(config_file => '/my/dns.conf'); These files are
even if I defined my own file: /etc/resolv.conf $HOME/.resolv.conf
./.resolv.conf Last 2 files shouldn't be read by default since it's possible
security issue - user can drop .resolv.conf pointing to malicious dns server.
This issue was found during testing spamassassin with selinux. For details see:
I'm reporting this error back into our bugzilla because of last comment in rt:
I think the level of this PR should be elevated to 'security'.
You are receiving this mail because:
You are on the CC list for the bug.