[Bug network/19634] New: resolv: Do not derive default domain name from host name

["fweimer at redhat dot com" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=19634

            Bug ID: 19634
           Summary: resolv: Do not derive default domain name from host
                    name
           Product: glibc
           Version: 2.24
            Status: NEW
          Severity: normal
          Priority: P2
         Component: network
          Assignee: unassigned at sourceware dot org
          Reporter: fweimer at redhat dot com
  Target Milestone: ---
             Flags: security+

When the host name (as returned by gethostname) is set to âexample.orgâ, the
resolver uses a default domain of âorgâ:

$ hostname
example.org
$ getent hosts gnu
208.118.235.148 gnu.org

This means that single-label queries are converted to queries for domains which
can, in principle, be registered by third parties, leading to potential
security issues.  This only happens if the host name contains a dot â.â, but it
is still surprising.

-- 
You are receiving this mail because:
You are on the CC list for the bug.