]> git.proxmox.com Git - mirror_frr.git/commit - zebra/label_manager.c
*: remove --enable-tcp-zebra, rework ZAPI path
authorDavid Lamparter <equinox@opensourcerouting.org>
Sun, 6 Aug 2017 05:35:50 +0000 (07:35 +0200)
committerDavid Lamparter <equinox@opensourcerouting.org>
Tue, 8 Aug 2017 09:14:05 +0000 (11:14 +0200)
commit689f5a8c84b95dbd31ecab481f8f2977965fe741
tree7c2a2b69908b3c3ac60e0de41b5a3f85caec2ef5
parent00857b241e6c27efad54a19b4226c37f04d80bf5
*: remove --enable-tcp-zebra, rework ZAPI path

This adds "@tcp" as new choice on the -z option present in zebra and the
protocol daemons.  The --enable-tcp-zebra option on configure is no
longer needed, both UNIX and TCP socket support is always available.

Note that @tcp should not be used by default (e.g. in an init script),
and --enable-tcp-zebra should never have been in any distro package
builds, because

**** TCP-ZEBRA IS A SECURITY PROBLEM ****

It allows arbitrary local users to mess with the routing table and
inject bogus data -- and also ZAPI is not designed to be robust against
attacks.

Signed-off-by: David Lamparter <equinox@opensourcerouting.org>
30 files changed:
configure.ac
doc/Building_FRR_on_CentOS6.md
doc/Building_FRR_on_CentOS7.md
doc/Building_FRR_on_Debian8.md
doc/Building_FRR_on_Fedora24.md
doc/Building_FRR_on_FreeBSD10.md
doc/Building_FRR_on_FreeBSD11.md
doc/Building_FRR_on_FreeBSD9.md
doc/Building_FRR_on_NetBSD6.md
doc/Building_FRR_on_NetBSD7.md
doc/Building_FRR_on_OmniOS.md
doc/Building_FRR_on_OpenBSD6.md
doc/Building_FRR_on_Ubuntu1204.md
doc/Building_FRR_on_Ubuntu1404.md
doc/Building_FRR_on_Ubuntu1604.md
doc/pimd.8.in
doc/zebra.8.in
ldpd/lde.c
ldpd/ldpd.c
lib/libfrr.c
lib/libfrr.h
lib/zclient.c
lib/zclient.h
redhat/README.rpm_build.md
redhat/frr.spec.in
tests/test_lblmgr.c
zebra/client_main.c
zebra/label_manager.c
zebra/main.c
zebra/zserv.c