Update-policy 'subdomain' was incorrectly treated as 'zonesub'

resulting in names outside the specified subdomain having the wrong
restrictions for the given key.

diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c
index 8abbbc462b1a4530ab7066c9fd0b6d8661f8802d..39ef13fdcfaf4eca3e499ea6f4cdba0c2a76fc43 100644 (file)
--- a/bin/named/zoneconf.c
+++ b/bin/named/zoneconf.c
@@ -252,7 +252,8 @@ configure_zone_ssutable(const cfg_obj_t *zconfig, dns_zone_t *zone,
 
                str = cfg_obj_asstring(matchtype);
                CHECK(dns_ssu_mtypefromstring(str, &mtype));
-               if (mtype == dns_ssumatchtype_subdomain) {
+               if (mtype == dns_ssumatchtype_subdomain &&
+                   strcasecmp(str, "zonesub") == 0) {
                        usezone = true;
                }