[Bug network/13935] getaddrinfo NXDOMAIN hijack exploit for hosts with two-component hostnames

["berend.de.schouwer at gmail dot com" <sourceware-bugzilla@sourceware.org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=13935

Berend <berend.de.schouwer at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |berend.de.schouwer at gmail dot co
                   |                            |m

--- Comment #6 from Berend <berend.de.schouwer at gmail dot com> ---
As a workaround you can try 'domain .'  WorksForMe(tm); but the file does get
overwritten by NetworkManager.

getdomainname(2) still returns the actual domainname, in my simplistic tests.

I stumbled across this from a slightly different angle:
- the corporate network sets the hostname.
- connecting over a non-corporate network then keeps the machine hostname, but
'search ...' is blank.
- externally the corporate network then ends up giving wildcards when there's a
failed lookup.

The end result is the same: typos result in answers rather than NXDOMAIN.

I'm for disabling implicit search lists if 'search ...' is blank.  I'll add
network-specific search lists as I connect.

(I also want the corporate DNS to not do this -- and have queried that
internally, but DNS lookups end me on sedoparking eventually)

-- 
You are receiving this mail because:
You are on the CC list for the bug.