From 128a131500d8fb57f3a917a9d5a9266b9baf6efb Mon Sep 17 00:00:00 2001 From: bert hubert Date: Mon, 20 Oct 2014 12:56:23 +0200 Subject: [PATCH] improve "subversion" idea, add delegation --- pdns/docs/security-poll.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/pdns/docs/security-poll.md b/pdns/docs/security-poll.md index 5524c32b10..edb73e92e6 100644 --- a/pdns/docs/security-poll.md +++ b/pdns/docs/security-poll.md @@ -43,7 +43,7 @@ which will move the security polls from: 'auth-x.y.z-n.security-status.debian.secpoll.powerdns.com Note two things, one, there is a separate namespace for debian, and -secondly, we include the sub-version of this release. This allows us to know +secondly, we use the package version of this release. This allows us to know that 3.6.0-1 (say) is insecure, but that 3.6.0-2 is not. ## Details @@ -51,7 +51,10 @@ The configuration setting 'security-poll-suffix' is by default set to 'secpoll.powerdns.com'. If empty, nothing is polled. This can be moved to 'secpoll.yourorganization.com'. -If compiled with DISTRIBUTION=dist SUBVERSION=abcde, queries will be sent to -"auth-x.y.z-abcde.dist.security-poll-suffix". +If compiled with DISTRIBUTION=dist PACKAGEVERSION=3.1.6-abcde, queries will be sent to +"auth-3.1.6-abcde.dist.security-poll-suffix". +## Delegation +If a distribution wants to host its own file with version information, we +can delegate dist.secpoll.powerdns.com to their nameservers directly. -- 2.47.2