syslogd fails to run with "-x" switch

Bug #131617 reported by james
2
Affects Status Importance Assigned to Milestone
sysklogd (Ubuntu)
Triaged
Wishlist
Unassigned

Bug Description

Binary package hint: sysklogd

sysklogd-1.4.1-20ubuntu4

While I would assume that the "-x" switch was removed from the Ubuntu version of syslogd because of the resulting denial-of-service vulnerability - see, for instance,
 http://arachnids.stillsecure.com/SAT/scripts/OSSSA/GPL/released/OSSSA/scripts/os2a_linux_syslogd_dos_601575.nasl
 - it does NOT follow that syslogd should crash when given the traditional "-x" switch. Instead, the "-x" switch should be ignored, or should cause a message to issue about the default behaviour of syslogd. Some people may even want a new switch to _force_ name lookups when receiving remote messages.

Further, the man page has been "censored" instead of updated with respect to the "-x" switch. The sysklogd man page should say that the "-x" switch will be ignored and that the default behaviour of syslogd is to disable name lookups when receiving remote messages. The man page should also say if the "-x" switch will be ignored silently, or if a message will be issued.

Mathias Gug (mathiaz)
Changed in sysklogd:
importance: Undecided → Wishlist
status: New → Triaged
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.