You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
38 lines
1.7 KiB
38 lines
1.7 KiB
6 months ago
|
From 92ca40483db514bac34d8cd29438f48a794fae91 Mon Sep 17 00:00:00 2001
|
||
|
|
From: Michal Sekletar <msekleta@redhat.com>
|
||
|
|
Date: Wed, 20 Dec 2023 16:44:14 +0100
|
||
|
|
Subject: [PATCH] resolved: actually check authenticated flag of SOA
|
||
|
|
transaction
|
||
|
|
|
||
|
|
Fixes #25676
|
||
|
|
|
||
|
|
(cherry picked from commit 3b4cc1437b51fcc0b08da8cc3f5d1175eed25eb1)
|
||
|
|
|
||
|
|
Resolves: RHEL-6216
|
||
|
|
---
|
||
|
|
src/resolve/resolved-dns-transaction.c | 4 ++--
|
||
|
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
||
|
|
|
||
|
|
diff --git a/src/resolve/resolved-dns-transaction.c b/src/resolve/resolved-dns-transaction.c
|
||
|
|
index 0212569fb0..0306af84a2 100644
|
||
|
|
--- a/src/resolve/resolved-dns-transaction.c
|
||
|
|
+++ b/src/resolve/resolved-dns-transaction.c
|
||
|
|
@@ -2800,7 +2800,7 @@ static int dns_transaction_requires_rrsig(DnsTransaction *t, DnsResourceRecord *
|
||
|
|
if (r == 0)
|
||
|
|
continue;
|
||
|
|
|
||
|
|
- return FLAGS_SET(t->answer_query_flags, SD_RESOLVED_AUTHENTICATED);
|
||
|
|
+ return FLAGS_SET(dt->answer_query_flags, SD_RESOLVED_AUTHENTICATED);
|
||
|
|
}
|
||
|
|
|
||
|
|
return true;
|
||
|
|
@@ -2827,7 +2827,7 @@ static int dns_transaction_requires_rrsig(DnsTransaction *t, DnsResourceRecord *
|
||
|
|
/* We found the transaction that was supposed to find the SOA RR for us. It was
|
||
|
|
* successful, but found no RR for us. This means we are not at a zone cut. In this
|
||
|
|
* case, we require authentication if the SOA lookup was authenticated too. */
|
||
|
|
- return FLAGS_SET(t->answer_query_flags, SD_RESOLVED_AUTHENTICATED);
|
||
|
|
+ return FLAGS_SET(dt->answer_query_flags, SD_RESOLVED_AUTHENTICATED);
|
||
|
|
}
|
||
|
|
|
||
|
|
return true;
|