Update-policy 'subdomain' was incorrectly treated as 'zonesub'

resulting in names outside the specified subdomain having the wrong
restrictions for the given key.

diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c
index 111d4d4b3bb89ab870302b481d82a4e667f3004d..1a4777f09b91cee6b2996f23a55280d93fa5e885 100644 (file)
--- a/bin/named/zoneconf.c
+++ b/bin/named/zoneconf.c
@@ -252,7 +252,8 @@ configure_zone_ssutable(const cfg_obj_t *zconfig, dns_zone_t *zone,
 
                str = cfg_obj_asstring(matchtype);
                CHECK(dns_ssu_mtypefromstring(str, &mtype));
-               if (mtype == dns_ssumatchtype_subdomain) {
+               if (mtype == dns_ssumatchtype_subdomain &&
+                   strcasecmp(str, "zonesub") == 0) {
                        usezone = true;
                }