Bug 248284

Summary: rpcbind ignores libwrap files
Product: [Fedora] Fedora Reporter: Allen Kistler <ackistler>
Component: rpcbindAssignee: Steve Dickson <steved>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 7   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 0.1.4-8.fc7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-10-29 19:02:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Allen Kistler 2007-07-15 06:37:41 UTC
Description of problem:
/etc/hosts.allow and /etc/hosts.deny have no effect on rpcbind connectivity

Version-Release number of selected component (if applicable):
rpcbind-0.1.4-6.fc7

How reproducible:
Always

Steps to Reproduce:
1. put portmap:ALL in /etc/hosts.deny and nothing in /etc/hosts.allow
2. put RPCBIND_ARGS="-l" in /etc/sysconfig/rpcbind
3. restart rpcbind
4. rpcinfo -d <hostname> from another host
  
Actual results:
Port is open and supplies info

Expected results:
Port should appear closed or reject connections

Additional info:
I also tried rpcbind:ALL and sunrpc:ALL in /etc/hosts.deny, just in case the
keyword changed.

FWIW the rpcbind init script incorrectly lists /etc/sysconfig/nfs (???) as the
config file.  I'll file another bug on that one.

Comment 1 Steve Dickson 2007-09-15 15:53:51 UTC
Fixed in rpcbind-0.1.4-8.fc7 and rpcbind-0.1.4-8.fc8

Comment 2 Fedora Update System 2007-09-18 22:31:02 UTC
rpcbind-0.1.4-8.fc7 has been pushed to the Fedora 7 testing repository.  If problems still persist, please make note of it in this bug report.

Comment 3 Fedora Update System 2007-10-29 19:02:11 UTC
rpcbind-0.1.4-8.fc7 has been pushed to the Fedora 7 stable repository.  If problems still persist, please make note of it in this bug report.