From ede1ee85e3f0353798d806b45894a1265ce3f1d4 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 5 Feb 2020 11:42:12 +0000 Subject: [PATCH] resolv.conf: Add "trust-ad" option Since we are running unbound locally which always runs DNSSEC validation, we can simply trust it and pass the ad flag on to applications which make use of it. Signed-off-by: Michael Tremer --- src/initscripts/system/localnet | 1 + 1 file changed, 1 insertion(+) diff --git a/src/initscripts/system/localnet b/src/initscripts/system/localnet index a16b32e46d..0d01bd3003 100644 --- a/src/initscripts/system/localnet +++ b/src/initscripts/system/localnet @@ -19,6 +19,7 @@ write_resolv_conf() { ( [ -n "${DOMAINNAME}" ] && echo "search ${DOMAINNAME}" echo "nameserver 127.0.0.1" + echo "options trust-ad" ) > /etc/resolv.conf } -- 2.39.5