Module Name:	src
Committed By:	ghen
Date:		Tue Jul 31 13:44:24 UTC 2007

Modified Files:
	src/dist/bind [netbsd-4]: CHANGES README version
	src/dist/bind/bin/named [netbsd-4]: client.c server.c
	src/dist/bind/bin/win32/BINDInstall [netbsd-4]: BINDInstall.dsp
	    BINDInstall.mak BINDInstallDlg.cpp
	src/dist/bind/doc/arm [netbsd-4]: Bv9ARM-book.xml Bv9ARM.ch01.html
	    Bv9ARM.ch02.html Bv9ARM.ch03.html Bv9ARM.ch04.html Bv9ARM.ch05.html
	    Bv9ARM.ch06.html Bv9ARM.ch07.html Bv9ARM.ch08.html Bv9ARM.ch09.html
	    Bv9ARM.ch10.html Bv9ARM.html Bv9ARM.pdf man.dig.html
	    man.dnssec-keygen.html man.dnssec-signzone.html man.host.html
	    man.named-checkconf.html man.named-checkzone.html man.named.html
	    man.rndc-confgen.html man.rndc.conf.html man.rndc.html
	src/dist/bind/lib/dns [netbsd-4]: dispatch.c
	src/dist/bind/lib/dns/include/dns [netbsd-4]: dispatch.h
	src/dist/bind/lib/dns/win32 [netbsd-4]: libdns.def
	src/dist/bind/win32utils [netbsd-4]: BuildSetup.bat

Log Message:
Apply patch (requested by adrianp in ticket #801):
Update BIND to version 9.4.1-P1 (security update).

 * "allow-query-cache" and "allow-recursion" now
   cross inherit from each other.

   If allow-query-cache is not set in named.conf then allow-recursion is used
   if set, otherwise allow-query is used if set, otherwise the default
   (localnets; localhost;) is used.

   If allow-recursion is not set in named.conf then allow-query-cache is used
   if set, otherwise allow-query is used if set, otherwise the default
   (localnets; localhost;) is used.

 * Query id generation was cryptographically weak.

 * The default acls for allow-query-cache and
   allow-recursion were not being applied.


To generate a diff of this commit:
cvs rdiff -r1.1.1.4.4.1 -r1.1.1.4.4.2 src/dist/bind/CHANGES
cvs rdiff -r1.14.4.1 -r1.14.4.2 src/dist/bind/README
cvs rdiff -r1.1.1.4.4.2 -r1.1.1.4.4.3 src/dist/bind/version
cvs rdiff -r1.1.1.4.4.1 -r1.1.1.4.4.2 src/dist/bind/bin/named/client.c \
    src/dist/bind/bin/named/server.c
cvs rdiff -r1.1.1.3 -r1.1.1.3.4.1 \
    src/dist/bind/bin/win32/BINDInstall/BINDInstall.dsp
cvs rdiff -r1.1.1.3.4.1 -r1.1.1.3.4.2 \
    src/dist/bind/bin/win32/BINDInstall/BINDInstall.mak
cvs rdiff -r1.1.1.4.4.1 -r1.1.1.4.4.2 \
    src/dist/bind/bin/win32/BINDInstall/BINDInstallDlg.cpp
cvs rdiff -r1.1.1.4.4.1 -r1.1.1.4.4.2 src/dist/bind/doc/arm/Bv9ARM-book.xml \
    src/dist/bind/doc/arm/Bv9ARM.ch01.html \
    src/dist/bind/doc/arm/Bv9ARM.ch02.html \
    src/dist/bind/doc/arm/Bv9ARM.ch03.html \
    src/dist/bind/doc/arm/Bv9ARM.ch04.html \
    src/dist/bind/doc/arm/Bv9ARM.ch05.html \
    src/dist/bind/doc/arm/Bv9ARM.ch06.html \
    src/dist/bind/doc/arm/Bv9ARM.ch07.html \
    src/dist/bind/doc/arm/Bv9ARM.ch08.html \
    src/dist/bind/doc/arm/Bv9ARM.ch09.html src/dist/bind/doc/arm/Bv9ARM.html
cvs rdiff -r1.1.1.2.2.2 -r1.1.1.2.2.3 src/dist/bind/doc/arm/Bv9ARM.ch10.html \
    src/dist/bind/doc/arm/man.dig.html \
    src/dist/bind/doc/arm/man.dnssec-keygen.html \
    src/dist/bind/doc/arm/man.dnssec-signzone.html \
    src/dist/bind/doc/arm/man.host.html \
    src/dist/bind/doc/arm/man.named-checkconf.html \
    src/dist/bind/doc/arm/man.named-checkzone.html \
    src/dist/bind/doc/arm/man.named.html \
    src/dist/bind/doc/arm/man.rndc-confgen.html \
    src/dist/bind/doc/arm/man.rndc.conf.html \
    src/dist/bind/doc/arm/man.rndc.html
cvs rdiff -r1.1.1.1.4.1 -r1.1.1.1.4.2 src/dist/bind/doc/arm/Bv9ARM.pdf
cvs rdiff -r1.1.1.4.4.1 -r1.1.1.4.4.2 src/dist/bind/lib/dns/dispatch.c
cvs rdiff -r1.1.1.3.4.1 -r1.1.1.3.4.2 \
    src/dist/bind/lib/dns/include/dns/dispatch.h
cvs rdiff -r1.1.1.3.4.1 -r1.1.1.3.4.2 src/dist/bind/lib/dns/win32/libdns.def
cvs rdiff -r1.1.1.3.4.1 -r1.1.1.3.4.2 src/dist/bind/win32utils/BuildSetup.bat

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.