[INN] #46: Support hiding groups in nnrpd
INN
rra at stanford.edu
Sun Dec 14 08:31:20 UTC 2008
#46: Support hiding groups in nnrpd
-------------------------+--------------------------------------------------
Reporter: eagle | Owner: eagle
Type: enhancement | Status: new
Priority: low | Milestone:
Component: nnrpd | Version:
Severity: wishlist | Keywords:
-------------------------+--------------------------------------------------
Currently, groups that exist but that one isn't allowed to read receive
different error codes (480 or 502) than groups that don't exist (411).
This lets users probe for the existence of groups, which may be an
information leak.
Add support for a hide: key in readers.conf listing a wildmat of groups
for which nnrpd will pretend complete non-existence, returning 411 instead
of 480/502. This lets news administrators hide groups at the cost of
clients not knowing when to do reactive authentication for them.
--
Ticket URL: <http://inn-new.eyrie.org/trac/ticket/46>
INN <http://www.eyrie.org/~eagle/software/inn/>
InterNetNews
More information about the inn-bugs
mailing list