I'd like to repoint out that mDNS is an *untrusted*, *ad-hoc* source.

if you have something relying on mDNS for any secure operation then THAT
IS BROKEN, not Avahi.

SetHostname in avahi has nothing to do with the 'sethostname' from LSB..
All sethostname in Avahi does is change the hostname avahi reports over
mDNS. Nothing more.

This can easily be done by firing up another mDNS daemon, or even
someone on another host could spoof your hostname as that. Or using the
Avahi API you can even publish a second hostname the same as if you had
changed the primary one.

Again, mDNS is an UNTRUSTED domain.  So your report is completely bogus
because you should never be trusting it in the first place.  Avahi is
not a 'mess', you seem to think it is something it is not.

-- 
SetHostName can be called by users
https://bugs.launchpad.net/bugs/195140
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to