From: Vítězslav Kříž <vitezslav.kriz@nic.cz>
Date: Wed, 1 Nov 2017 17:52:40 +0000 (+0100)
Subject: Signaling trust anchor is enabled by default
X-Git-Tag: v1.5.0~2^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ac23d8d0f1966e36e74fed0f66f93d2cb62a4d4a;p=thirdparty%2Fknot-resolver.git

Signaling trust anchor is enabled by default
---

diff --git a/daemon/lua/sandbox.lua b/daemon/lua/sandbox.lua
index 5d57c22ef..dd43c1474 100644
--- a/daemon/lua/sandbox.lua
+++ b/daemon/lua/sandbox.lua
@@ -200,6 +200,9 @@ else -- Lua 5.2+
 	_SANDBOX = make_sandbox(_ENV)
 end
 
+-- Load embedded modules
+modules.load('ta_signal_query')
+
 -- Interactive command evaluation
 function eval_cmd(line, raw)
 	-- Compatibility sandbox code loading
diff --git a/modules/ta_signal_query/README.rst b/modules/ta_signal_query/README.rst
index 93db257f4..00bdd48f5 100644
--- a/modules/ta_signal_query/README.rst
+++ b/modules/ta_signal_query/README.rst
@@ -18,12 +18,5 @@ of new keys. This is of particular interest for the DNS root zone in the event
 of key and/or algorithm rollovers that rely on RFC 5011 to automatically
 update a validating DNS resolver’s trust anchor.
 
-.. tip:: It is recommended to always keep this module enabled.
-
-Example configuration
-^^^^^^^^^^^^^^^^^^^^^
-
-.. code-block:: lua
-
-	-- Signal trust anchor keys configured in the validator
-	modules = { 'ta_signal_query' }
+This module is enabled by default. You may use modules.unload('ta_signal_query')
+in your configuration.
diff --git a/tests/deckard b/tests/deckard
index d43b0c893..f5bfe683d 160000
--- a/tests/deckard
+++ b/tests/deckard
@@ -1 +1 @@
-Subproject commit d43b0c893c74ffeb11c4a28b6b1c307eda207768
+Subproject commit f5bfe683de82772073e4d3edbb4b08f35cd3f346