From 07d9e1914a989911aa01425f6a122d0e465571c7 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 5 Feb 2020 11:45:47 +0000 Subject: [PATCH] resolv.conf: Add "trust-ad" option Since we are running unbound locally which always runs DNSSEC validation, we can simply trust it and pass the ad flag on to applications which make use of it. Signed-off-by: Michael Tremer Signed-off-by: Arne Fitzenreiter --- src/initscripts/system/localnet | 1 + 1 file changed, 1 insertion(+) diff --git a/src/initscripts/system/localnet b/src/initscripts/system/localnet index a16b32e46d..0d01bd3003 100644 --- a/src/initscripts/system/localnet +++ b/src/initscripts/system/localnet @@ -19,6 +19,7 @@ write_resolv_conf() { ( [ -n "${DOMAINNAME}" ] && echo "search ${DOMAINNAME}" echo "nameserver 127.0.0.1" + echo "options trust-ad" ) > /etc/resolv.conf } -- 2.39.2