diff mbox series

[5/5] resolv.conf: Add "trust-ad" option

Message ID 20200205114547.16047-5-michael.tremer@ipfire.org
State Accepted
Commit 07d9e1914a989911aa01425f6a122d0e465571c7
Headers
Series [1/5] gcc: Fix build with glibc 2.31 |

Commit Message

Michael Tremer Feb. 5, 2020, 11:45 a.m. UTC 
  Since we are running unbound locally which always runs DNSSEC
validation, we can simply trust it and pass the ad flag on to
applications which make use of it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 src/initscripts/system/localnet | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/src/initscripts/system/localnet b/src/initscripts/system/localnet
index a16b32e46..0d01bd300 100644
--- a/src/initscripts/system/localnet
+++ b/src/initscripts/system/localnet
@@ -19,6 +19,7 @@  write_resolv_conf() {
 	(
 		[ -n "${DOMAINNAME}" ] && echo "search ${DOMAINNAME}"
 		echo "nameserver 127.0.0.1"
+		echo "options trust-ad"
 	) > /etc/resolv.conf
 }