From 298b7b16036beec83b74e0c4160bc69b67264b35 Mon Sep 17 00:00:00 2001
From: Ken Raeburn <raeburn@mit.edu>
Date: Fri, 8 Mar 2002 23:11:26 +0000
Subject: [PATCH] update comment

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14258 dc483132-0cff-0310-8789-dd5450dbe970
---
 src/appl/bsd/login.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/appl/bsd/login.c b/src/appl/bsd/login.c
index dee36247a..e2fd62d27 100644
--- a/src/appl/bsd/login.c
+++ b/src/appl/bsd/login.c
@@ -818,7 +818,8 @@ static int verify_krb_v4_tgt (realm)
     memcpy ((char *) &addr, (char *)hp->h_addr, sizeof (addr));
     /* Do we have rcmd.<host> keys? */
 #if 0 /* Be paranoid.  If srvtab exists, assume it must contain the
-	 right key.  */
+	 right key.  The more paranoid mode also helps avoid a
+	 possible DNS spoofing issue.  */
     have_keys = read_service_key (rcmd_str, phost, realm, 0, KEYFILE, key)
 	? 0 : 1;
     memset (key, 0, sizeof (key));
-- 
2.26.2