From: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed, 5 Feb 2020 11:45:47 +0000 (+0000)
Subject: resolv.conf: Add "trust-ad" option
X-Git-Tag: v2.25-core143~74
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=07d9e1914a989911aa01425f6a122d0e465571c7;p=ipfire-2.x.git

resolv.conf: Add "trust-ad" option

Since we are running unbound locally which always runs DNSSEC
validation, we can simply trust it and pass the ad flag on to
applications which make use of it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---

diff --git a/src/initscripts/system/localnet b/src/initscripts/system/localnet
index a16b32e46d..0d01bd3003 100644
--- a/src/initscripts/system/localnet
+++ b/src/initscripts/system/localnet
@@ -19,6 +19,7 @@ write_resolv_conf() {
 	(
 		[ -n "${DOMAINNAME}" ] && echo "search ${DOMAINNAME}"
 		echo "nameserver 127.0.0.1"
+		echo "options trust-ad"
 	) > /etc/resolv.conf
 }