[INN] #46: Support hiding groups in nnrpd

INN rra at stanford.edu
Sun Dec 14 08:31:20 UTC 2008


#46: Support hiding groups in nnrpd
-------------------------+--------------------------------------------------
 Reporter:  eagle        |       Owner:  eagle
     Type:  enhancement  |      Status:  new  
 Priority:  low          |   Milestone:       
Component:  nnrpd        |     Version:       
 Severity:  wishlist     |    Keywords:       
-------------------------+--------------------------------------------------
 Currently, groups that exist but that one isn't allowed to read receive
 different error codes (480 or 502) than groups that don't exist (411).
 This lets users probe for the existence of groups, which may be an
 information leak.

 Add support for a hide: key in readers.conf listing a wildmat of groups
 for which nnrpd will pretend complete non-existence, returning 411 instead
 of 480/502.  This lets news administrators hide groups at the cost of
 clients not knowing when to do reactive authentication for them.

-- 
Ticket URL: <http://inn-new.eyrie.org/trac/ticket/46>
INN <http://www.eyrie.org/~eagle/software/inn/>
InterNetNews


More information about the inn-bugs mailing list