Only allow changing the domainname (from empty) before securelevel increase.
authorderaadt <deraadt@openbsd.org>
Tue, 26 Jul 2022 14:53:45 +0000 (14:53 +0000)
committerderaadt <deraadt@openbsd.org>
Tue, 26 Jul 2022 14:53:45 +0000 (14:53 +0000)
commita3f0262752c0786acd822b767924c657c9e98071
treef006c7d9b5e77f049431c2538fb6dcb604b875f1
parentbfcef0862b80be7e33f3b259f0aa768556063cf3
Only allow changing the domainname (from empty) before securelevel increase.
libc YP support has a couple of places where the domainname is cached, and
this results in wildly incoherent behaviour which could even be risky.
If you want to change the domainname, you will have to reboot.
ok beck miod
sys/kern/kern_sysctl.c