Index: lib/libcasper/services/cap_dns/cap_dns.3 =================================================================== --- lib/libcasper/services/cap_dns/cap_dns.3 +++ lib/libcasper/services/cap_dns/cap_dns.3 @@ -134,19 +134,21 @@ .Dv NAME . The .Dv ADDR -means that functions -.Fn cap_gethostbyname , -.Fn cap_gethostbyname2 +means that revert DNS lookups is allowed with +.Fn cap_getnameinfo and .Fn cap_gethostbyaddr -are allowed. +functions. In case when .Va type is set to .Dv NAME -the -.Fn cap_getnameinfo -function is allowed. +the name resolution is allowed with +.Fn cap_getaddrinfo , +.Fn cap_gethostbyname , +and +.Fn cap_gethostbyname2 +functions. .It family ( NV_TYPE_NUMBER ) The .Va family Index: lib/libcasper/services/cap_dns/cap_dns.c =================================================================== --- lib/libcasper/services/cap_dns/cap_dns.c +++ lib/libcasper/services/cap_dns/cap_dns.c @@ -524,7 +524,7 @@ socklen_t salen; int error, flags; - if (!dns_allowed_type(limits, "NAME")) + if (!dns_allowed_type(limits, "ADDR")) return (NO_RECOVERY); error = 0; @@ -617,7 +617,7 @@ unsigned int ii; int error, family, n; - if (!dns_allowed_type(limits, "ADDR")) + if (!dns_allowed_type(limits, "NAME")) return (NO_RECOVERY); hostname = dnvlist_get_string(nvlin, "hostname", NULL);