diff options
| author | des <des@FreeBSD.org> | 2013-09-23 20:06:59 +0000 |
|---|---|---|
| committer | des <des@FreeBSD.org> | 2013-09-23 20:06:59 +0000 |
| commit | 0f8f840670a0d35203600fb99b86013beb6c00eb (patch) | |
| tree | dad1b185fb3066fe3114c2afce467b93f0213d9b /contrib/diff | |
| parent | ff52db8211aeda98e79c8dde663aae3ea5d12dd0 (diff) | |
| download | FreeBSD-src-0f8f840670a0d35203600fb99b86013beb6c00eb.zip FreeBSD-src-0f8f840670a0d35203600fb99b86013beb6c00eb.tar.gz | |
Prevent resolvconf from updating /etc/resolv.conf. As Jakob Schlyter
pointed out, having additional nameservers listed in /etc/resolv.conf
can break DNSSEC verification by providing a false positive if unbound
returns SERVFAIL due to an invalid signature. The downside is that
the domain / search path won't get updated either, but we can live
with that.
Approved by: re (blanket)
Diffstat (limited to 'contrib/diff')
0 files changed, 0 insertions, 0 deletions
