Only allow changing the domainname (from empty) before securelevel increase.
authorderaadt <deraadt@openbsd.org>
Tue, 26 Jul 2022 14:53:29 +0000 (14:53 +0000)
committerderaadt <deraadt@openbsd.org>
Tue, 26 Jul 2022 14:53:29 +0000 (14:53 +0000)
commitbfcef0862b80be7e33f3b259f0aa768556063cf3
treee48f3b3480260b528012bc81c67ff101d0279a41
parent37815491b4d4ec0f6b60ebaab69771fac34ed572
Only allow changing the domainname (from empty) before securelevel increase.
libc YP support has a couple of places where the domainname is cached, and
this results in wildly incoherent behaviour which could even be risky.
If you want to change the domainname, you will have to reboot.
ok beck miod
lib/libc/gen/getdomainname.3