turn logging off again, it is still unsafe

diff --git a/sbin/routed/Makefile b/sbin/routed/Makefile
index 35ebc31..137c08c 100644 (file)
--- a/sbin/routed/Makefile
+++ b/sbin/routed/Makefile
@@ -1,4 +1,4 @@
-#      $OpenBSD: Makefile,v 1.4 1996/09/05 14:31:10 mickey Exp $
+#      $OpenBSD: Makefile,v 1.5 1996/09/06 13:05:51 deraadt Exp $
 #      @(#)Makefile    8.1 (Berkeley) 6/19/93
 
 PROG=  routed
@@ -10,6 +10,9 @@ SUBDIR=       rtquery
 DPADD= ${LIBCOMPAT}
 LDADD= -lcompat
 
+# Do *NOT* turn this flag on unless you like security holes
+#CFLAGS+=-DPERMIT_TRACE
+
 .PATH: ${.CURDIR}/../../sys/net
 
 .include <bsd.prog.mk>

diff --git a/sbin/routed/input.c b/sbin/routed/input.c
index c17e4fd..2cb959f 100644 (file)
--- a/sbin/routed/input.c
+++ b/sbin/routed/input.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: input.c,v 1.4 1996/09/05 14:31:27 mickey Exp $        */
+/*     $OpenBSD: input.c,v 1.5 1996/09/06 13:05:52 deraadt Exp $       */
 
 /*
  * Copyright (c) 1983, 1988, 1993
@@ -36,7 +36,7 @@
 #if !defined(lint)
 static char sccsid[] = "@(#)input.c    8.1 (Berkeley) 6/5/93";
 #else
-static char rcsid[] = "$OpenBSD: input.c,v 1.4 1996/09/05 14:31:27 mickey Exp $";
+static char rcsid[] = "$OpenBSD: input.c,v 1.5 1996/09/06 13:05:52 deraadt Exp $";
 #endif
 
 #include "defs.h"
@@ -304,6 +304,7 @@ input(struct sockaddr_in *from,             /* received from this IP address */
                               naddr_ntoa(FROM_NADDR));
                        return;
                }
+#if PERMIT_TRACE
                if (rip->rip_cmd == RIPCMD_TRACEON) {
                        rip->rip_tracefile[size-4] = '\0';
                        trace_on((char*)rip->rip_tracefile, 0);
@@ -311,6 +312,10 @@ input(struct sockaddr_in *from,            /* received from this IP address */
                        trace_off("tracing turned off by %s\n",
                                  naddr_ntoa(FROM_NADDR));
                }
+#else
+               msglog("trace command from %s ignored: %s\n",
+                   rip->rip_tracefile);
+#endif
                return;
 
        case RIPCMD_RESPONSE: