]>
git.ipfire.org Git - thirdparty/unbound.git/log
TCY16 [Thu, 13 Jan 2022 13:50:43 +0000 (14:50 +0100)]
modify tdir to ignore localzone tests
Willem Toorop [Tue, 11 Jan 2022 08:26:49 +0000 (09:26 +0100)]
Merge branch 'master' into review-rfc8914-ede
TCY16 [Mon, 10 Jan 2022 15:28:54 +0000 (16:28 +0100)]
remove debug line
W.C.A. Wijngaards [Fri, 7 Jan 2022 12:23:18 +0000 (13:23 +0100)]
Changelog note for #600
- Merge #600 from pemensik: Change file mode before changing file
owner.
Wouter Wijngaards [Fri, 7 Jan 2022 12:23:03 +0000 (13:23 +0100)]
Merge pull request #600 from InfrastructureServices/remote-unix-chmod
Change file mode before changing file owner
Petr Mensik [Fri, 7 Jan 2022 11:01:28 +0000 (12:01 +0100)]
Change file mode before changing file owner
Change mode first when configuring remote control unix socket. Some
security systems might strip capability of changing other user's system
even to process with effective uid 0. That is done on Fedora by SELinux
policy and systemd for example. SELinux audit then shows errors, because
unbound tries modifying permissions of not own file. Fix just by mode
change as first step, make it owned by unbound:unbound user as the last
step only.
Related: rhbz#
1905441
Alex Band [Fri, 7 Jan 2022 09:21:50 +0000 (10:21 +0100)]
Update documentation links
W.C.A. Wijngaards [Wed, 5 Jan 2022 15:48:35 +0000 (16:48 +0100)]
- Fix for #596: Fix rpz-signal-nxdomain-ra to work for clientip
triggered operation.
W.C.A. Wijngaards [Wed, 5 Jan 2022 15:14:47 +0000 (16:14 +0100)]
- Fix #598: Fix unbound-checkconf fatal error: module conf
'respip dns64 validator iterator' is not known to work.
W.C.A. Wijngaards [Wed, 5 Jan 2022 13:31:42 +0000 (14:31 +0100)]
- Fix for #596: add unit test for nsip trigger and signal unset RA.
W.C.A. Wijngaards [Wed, 5 Jan 2022 13:13:52 +0000 (14:13 +0100)]
- Fix for #596: add unit test for nsdname trigger and signal unset RA.
W.C.A. Wijngaards [Wed, 5 Jan 2022 12:39:06 +0000 (13:39 +0100)]
- Fix unit tests for rpz now that the AA flag returns successfully from
the iterator loop.
W.C.A. Wijngaards [Wed, 5 Jan 2022 12:35:18 +0000 (13:35 +0100)]
- Fix for #596: fix that rpz return message is returned and not just
the rcode from the iterator return path. This fixes signal unset RA
after a CNAME.
W.C.A. Wijngaards [Tue, 4 Jan 2022 12:49:31 +0000 (13:49 +0100)]
- Fix that RPZ does not set RD flag on replies, it should be copied
from the query.
W.C.A. Wijngaards [Tue, 4 Jan 2022 12:48:29 +0000 (13:48 +0100)]
- Fix #596: only unset RA when NXDOMAIN is signalled.
W.C.A. Wijngaards [Tue, 4 Jan 2022 12:41:27 +0000 (13:41 +0100)]
- Fix to add test for rpz-signal-nxdomain-ra.
W.C.A. Wijngaards [Tue, 4 Jan 2022 12:40:07 +0000 (13:40 +0100)]
- Fix #596: unset the RA bit when a query is blocked by an unbound
RPZ nxdomain reply. The option rpz-signal-nxdomain-ra allows to
signal that a domain is externally blocked to clients when it
is blocked with NXDOMAIN by unsetting RA.
TCY16 [Wed, 22 Dec 2021 14:47:50 +0000 (15:47 +0100)]
fix missing disable in remote-control local_zone do_ede and typos
George Thessalonikefs [Wed, 22 Dec 2021 14:02:44 +0000 (15:02 +0100)]
- contrib/aaaa-filter-iterator.patch file renewed diff content to
apply cleanly to the current coderepo for the current code version.
TCY16 [Wed, 22 Dec 2021 13:39:06 +0000 (14:39 +0100)]
add remote control options for local-zone and RPZ do_ede
TCY16 [Tue, 21 Dec 2021 12:17:57 +0000 (13:17 +0100)]
remove superfluous linebreaks
TCY16 [Tue, 21 Dec 2021 12:17:07 +0000 (13:17 +0100)]
add logic for per zone EDE for RPZ and configurable rpz-do-ede
George Thessalonikefs [Mon, 20 Dec 2021 10:35:31 +0000 (11:35 +0100)]
- Fix #591: Unbound-anchor manpage links to non-existent license file.
TCY16 [Thu, 16 Dec 2021 10:45:18 +0000 (11:45 +0100)]
Document how the log-val-level: config options influences the returned EDE option text
TCY16 [Wed, 15 Dec 2021 13:59:45 +0000 (14:59 +0100)]
fix rpl tests
tcarpay [Wed, 15 Dec 2021 12:07:01 +0000 (13:07 +0100)]
Merge branch 'master' into features/rfc8914-ede
TCY16 [Wed, 15 Dec 2021 11:49:54 +0000 (12:49 +0100)]
fix DNSSEC nsec-failure test
TCY16 [Wed, 15 Dec 2021 11:29:11 +0000 (12:29 +0100)]
add todo for tests and fix EDE codes for DNSKEY missing
Tom Carpay [Wed, 15 Dec 2021 11:05:45 +0000 (11:05 +0000)]
expand ede.tdir to do validator test for DNSKEY, RRSIG and NSEC missing
George Thessalonikefs [Mon, 13 Dec 2021 11:46:08 +0000 (12:46 +0100)]
- Add missing configure flags for optional features in the
documentation.
- Fix Unbound capitalization in the documentation.
W.C.A. Wijngaards [Mon, 13 Dec 2021 09:00:53 +0000 (10:00 +0100)]
- Fix to pick up other class local zone information before unlock.
George Thessalonikefs [Fri, 10 Dec 2021 16:35:36 +0000 (17:35 +0100)]
- Allow local-data for classes other than IN to inherit a configured
local-zone's type if possible, instead of defaulting to type
transparent as per the implicit rule.
W.C.A. Wijngaards [Fri, 10 Dec 2021 08:12:58 +0000 (09:12 +0100)]
- Add code similar to fix for ldns for tab between strings, for
consistency, the test case was not broken.
W.C.A. Wijngaards [Thu, 9 Dec 2021 09:22:39 +0000 (10:22 +0100)]
Continue with version 1.14.1
TCY16 [Tue, 7 Dec 2021 12:25:32 +0000 (13:25 +0100)]
add config options to test conf, fix local-zone EDE printing logic, and fix typo in the unbound.conf
TCY16 [Mon, 6 Dec 2021 13:19:28 +0000 (14:19 +0100)]
finish up adding validator EDEs and other TODOs and fix tests with more specific EDE codes
W.C.A. Wijngaards [Mon, 6 Dec 2021 12:12:44 +0000 (13:12 +0100)]
- Fix validator debug output about DS support, print correct algorithm.
W.C.A. Wijngaards [Mon, 6 Dec 2021 08:04:50 +0000 (09:04 +0100)]
Changelog note for #581
Wouter Wijngaards [Mon, 6 Dec 2021 08:04:32 +0000 (09:04 +0100)]
Merge pull request #581 from fobser/warnings
Fix -Wmissing-prototypes and -Wshadow warnings in rpz
Florian Obser [Fri, 3 Dec 2021 17:30:08 +0000 (18:30 +0100)]
Fix -Wshadow
Florian Obser [Fri, 3 Dec 2021 17:29:04 +0000 (18:29 +0100)]
Fix -Wmissing-prototypes by declaring functions static.
W.C.A. Wijngaards [Fri, 3 Dec 2021 09:44:47 +0000 (10:44 +0100)]
- Fix compile warning for if_nametoindex on windows 64bit.
W.C.A. Wijngaards [Wed, 1 Dec 2021 16:13:11 +0000 (17:13 +0100)]
- Fix doc/unbound.doxygen to remove obsolete tag warning.
W.C.A. Wijngaards [Wed, 1 Dec 2021 09:08:54 +0000 (10:08 +0100)]
- configure is set to 1.14.0, and release branch.
George Thessalonikefs [Wed, 1 Dec 2021 03:31:58 +0000 (04:31 +0100)]
- Fix #574: Review fixes for size allocation.
George Thessalonikefs [Wed, 1 Dec 2021 03:26:36 +0000 (04:26 +0100)]
- Fix #454: listen_dnsport.c:825: error: ‘IPV6_TCLASS’ undeclared.
George Thessalonikefs [Wed, 1 Dec 2021 03:03:27 +0000 (04:03 +0100)]
Changelog note for #530:
- Merge PR #530 from Shchelk: Fix: dereferencing a null pointer.
gthess [Wed, 1 Dec 2021 03:02:03 +0000 (04:02 +0100)]
Merge pull request #530 from Shchelk/bugfix
Fix: dereferencing a null pointer
George Thessalonikefs [Wed, 1 Dec 2021 03:00:24 +0000 (04:00 +0100)]
Changelog note for #522:
- Merge PR #522 from sibeream: memory management violations fixed.
gthess [Wed, 1 Dec 2021 02:59:32 +0000 (03:59 +0100)]
Merge pull request #522 from sibeream/net_help_RESOURCE_LEAK
- memory management violations fixed
George Thessalonikefs [Wed, 1 Dec 2021 02:58:01 +0000 (03:58 +0100)]
Changelog note for #562:
- Merge PR #562 from Willem: Reset keepalive per new tcp session.
gthess [Wed, 1 Dec 2021 02:57:04 +0000 (03:57 +0100)]
Merge pull request #562 from NLnetLabs/bugfix/reset-keepalive-per-tcp-session
Reset keepalive per new tcp session
George Thessalonikefs [Wed, 1 Dec 2021 02:55:53 +0000 (03:55 +0100)]
Changelog note for #555:
- Merge PR #555 from fobser: Allow interface names as scope-id in
IPv6 link-local addresses.
gthess [Wed, 1 Dec 2021 02:54:45 +0000 (03:54 +0100)]
Merge pull request #555 from fobser/if_nametoindex
Allow interface names as scope-id in IPv6 link-local addresses.
George Thessalonikefs [Wed, 1 Dec 2021 02:51:12 +0000 (03:51 +0100)]
Changelog note for #493:
- Merge PR #493 from Jaap: Fix generation of libunbound.pc.
George Thessalonikefs [Wed, 1 Dec 2021 02:50:16 +0000 (03:50 +0100)]
Merge branch 'master' of github.com:NLnetLabs/unbound
gthess [Wed, 1 Dec 2021 02:50:01 +0000 (03:50 +0100)]
Merge pull request #493 from NLnetLabs/patch-configure
Fix generation of libunbound.pc
George Thessalonikefs [Wed, 1 Dec 2021 02:48:51 +0000 (03:48 +0100)]
Changelog note for #511:
- Merge PR #511 from yan12125: Reduce unnecessary linking.
gthess [Wed, 1 Dec 2021 02:46:25 +0000 (03:46 +0100)]
Merge pull request #511 from yan12125/python-linking
- Reduce unnecessary linking
W.C.A. Wijngaards [Tue, 30 Nov 2021 14:05:27 +0000 (15:05 +0100)]
- iana portlist update.
W.C.A. Wijngaards [Tue, 30 Nov 2021 12:38:39 +0000 (13:38 +0100)]
- Fix to remove git tracking and ci information from release tarballs.
TCY16 [Tue, 30 Nov 2021 11:12:57 +0000 (12:12 +0100)]
add ede-local-zones in the manpage and update the iana_ports.inc for some reason
TCY16 [Tue, 30 Nov 2021 10:32:01 +0000 (11:32 +0100)]
change local-zone-default-ede keywords to '-', add missing {}, and add manpage entry for local-zone-do-ede, local-zone-default-ede, and ede-local-zones
W.C.A. Wijngaards [Mon, 29 Nov 2021 15:11:32 +0000 (16:11 +0100)]
- Fix #574: Review fix for spelling.
W.C.A. Wijngaards [Mon, 29 Nov 2021 15:10:45 +0000 (16:10 +0100)]
- Fix #576: [FR] UB_* error codes in unbound.h
W.C.A. Wijngaards [Mon, 29 Nov 2021 14:26:07 +0000 (15:26 +0100)]
- Fix #574: Review fixes for it.
W.C.A. Wijngaards [Mon, 29 Nov 2021 14:13:14 +0000 (15:13 +0100)]
- Fix #574: Review fixes for it.
W.C.A. Wijngaards [Mon, 29 Nov 2021 13:59:39 +0000 (14:59 +0100)]
- Fix #574: unbound-checkconf reports fatal error if interface names
are used as value for interfaces:
W.C.A. Wijngaards [Mon, 29 Nov 2021 10:57:45 +0000 (11:57 +0100)]
- Fix to make python module opt_list use opt_list_in.
W.C.A. Wijngaards [Mon, 29 Nov 2021 10:41:45 +0000 (11:41 +0100)]
- Fix for #570: regen aclocal.m4, fix configure.ac for spelling.
Wouter Wijngaards [Mon, 29 Nov 2021 10:39:48 +0000 (11:39 +0100)]
Merge pull request #570 from rex4539/typos
Fix typos
TCY16 [Fri, 26 Nov 2021 14:35:53 +0000 (15:35 +0100)]
add error in case of incorrect string for local-zone-default-ede
TCY16 [Fri, 26 Nov 2021 14:12:56 +0000 (15:12 +0100)]
add config option for global EDE flag, local-zone specific EDE flag and default EDE code for a zone
TCY16 [Fri, 19 Nov 2021 10:55:13 +0000 (11:55 +0100)]
add forgotten autogenerated files
TCY16 [Fri, 19 Nov 2021 10:27:13 +0000 (11:27 +0100)]
change do_ede to be local-zone specific and add places for more EDE codes
Tom Carpay [Tue, 16 Nov 2021 13:21:03 +0000 (13:21 +0000)]
add missing parsing
TCY16 [Tue, 16 Nov 2021 10:25:58 +0000 (11:25 +0100)]
setup for configurable EDEs for local-zone
Tom Carpay [Tue, 16 Nov 2021 08:25:53 +0000 (08:25 +0000)]
remove superfluous EDE left over from merge
Tom Carpay [Mon, 15 Nov 2021 15:00:35 +0000 (15:00 +0000)]
Fix merge bugs
Tom Carpay [Mon, 15 Nov 2021 14:48:35 +0000 (14:48 +0000)]
Merge branch 'master' into features/rfc8914-ede
Tom Carpay [Mon, 15 Nov 2021 14:18:56 +0000 (14:18 +0000)]
Document PR #563 to changelog
tcarpay [Mon, 15 Nov 2021 14:14:51 +0000 (15:14 +0100)]
Merge pull request #563 from NLnetLabs/bugfix/general-edns-options3
Better positioning of general EDNS option handling: revisited V2
Tom Carpay [Mon, 15 Nov 2021 14:00:31 +0000 (14:00 +0000)]
Clarify KEEPALIVE EDNS0 option operation
Tom Carpay [Mon, 15 Nov 2021 13:40:51 +0000 (13:40 +0000)]
Make explicit whether edns options are parsed from queries or responses
Tom Carpay [Mon, 15 Nov 2021 12:33:08 +0000 (12:33 +0000)]
add missing return code
tcarpay [Mon, 15 Nov 2021 12:03:26 +0000 (13:03 +0100)]
Remove wrongly added EDE comments
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com>
Dimitris Apostolou [Sat, 13 Nov 2021 14:56:15 +0000 (16:56 +0200)]
Fix typos
TCY16 [Wed, 10 Nov 2021 15:58:54 +0000 (16:58 +0100)]
make local_data ede inclusion configurable, rewrite local_error_encode to include this logic, and remove superfluous msgparse_check_edns_in_packet function
tcarpay [Mon, 8 Nov 2021 11:28:03 +0000 (12:28 +0100)]
Update util/data/msgparse.c
Co-authored-by: gthess <george@nlnetlabs.nl>
TCY16 [Mon, 8 Nov 2021 10:50:57 +0000 (11:50 +0100)]
add potential EDE spots
TCY16 [Mon, 8 Nov 2021 10:50:29 +0000 (11:50 +0100)]
complete renaming of the modules edns list
tcarpay [Mon, 8 Nov 2021 10:02:54 +0000 (11:02 +0100)]
Apply suggestions from code review
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl>
W.C.A. Wijngaards [Fri, 5 Nov 2021 12:22:27 +0000 (13:22 +0100)]
Changelog note for #565
- Merge #565: unbound.service.in: Disable ProtectKernelTunables again.
Wouter Wijngaards [Fri, 5 Nov 2021 12:21:00 +0000 (13:21 +0100)]
Merge pull request #565 from Maryse47/patch-1
unbound.service.in: Disable ProtectKernelTunables again
W.C.A. Wijngaards [Fri, 5 Nov 2021 11:13:38 +0000 (12:13 +0100)]
- Fix to remove unused code from rpz resolve client and action
function.
W.C.A. Wijngaards [Fri, 5 Nov 2021 11:02:50 +0000 (12:02 +0100)]
- Fix analyzer review failure in rpz action override code to not
crash on unlocking the local zone lock.
George Thessalonikefs [Fri, 5 Nov 2021 10:21:30 +0000 (11:21 +0100)]
- Fix for #558: clear the UB_EV_TIMEOUT bit before adding an event.
George Thessalonikefs [Fri, 5 Nov 2021 10:15:19 +0000 (11:15 +0100)]
- Fix for #558: fix loop in comm_point->tcp_free when a comm_point is reclaimed
more than once during callbacks.
W.C.A. Wijngaards [Fri, 5 Nov 2021 09:16:27 +0000 (10:16 +0100)]
- Fix that forward-zone name is documented as the full name of the
zone. It is not relative but a fully qualified domain name.
Maryse47 [Wed, 3 Nov 2021 13:05:11 +0000 (13:05 +0000)]
Disable ProtectKernelTunables again
This option was removed in https://github.com/NLnetLabs/unbound/commit/
ff8fd0be5c529e7a1b84e8c74426e9c531c0a8f8 but reintroduced in https://github.com/NLnetLabs/unbound/commit/
c32b9e4ba95983146eac805719db720f02a64358
Disable it with commentary in hope to prevent slipping it in again.