Comment 2 for bug 931917

Revision history for this message
Clint Byrum (clint-fewbar) wrote : Re: [Bug 931917] [NEW] regex_policy should use apache like ALLOW/DENY

Excerpts from Stewart Smith's message of Tue Feb 14 23:36:37 UTC 2012:
> On Tue, 14 Feb 2012 08:20:51 -0000, Henrik Ingo <email address hidden> wrote:
> > In auth_regex the pair of commands ACCEPT/DENY is confusing. It should
> > have been either ACCEPT/REJECT (see iptables) or ALLOW/DENY (see apache
> > httpd). My proposal is to make it ALLOW/DENY.
>
> Maybe allow all 4, with ACCEPT/REJECT being synonyms for ALLOW/DENY and
> then it should all "just work"? :)
>

+1 from me.

Note that this plugin *really* needs to have my other branch merged which
helps to reduce its memory impact on the system. It caches every lookup
right now. This branch fixes that by limiting the cache size:

https://code.launchpad.net/~clint-fewbar/drizzle/regex-policy-cache-limiter/+merge/53536

I wouldn't recommend using the plugin without that branch merged (failed
on some boost bug in SuSE)