]> git.ipfire.org Git - thirdparty/bind9.git/commit
Reject zones with TTL higher than dnssec-policy max-zone-ttl
authorMatthijs Mekking <matthijs@isc.org>
Wed, 13 Jul 2022 08:28:59 +0000 (10:28 +0200)
committerEvan Hunt <each@isc.org>
Wed, 20 Jul 2022 18:55:07 +0000 (11:55 -0700)
commit0712ba502cdc9bb2a55bcd3b41184cddd29b47fb
tree70571ca652d6d10017f423bfecfa8159338cea89
parent21930c70c6a6676014b3eab7b7e74d66e6230d5e
Reject zones with TTL higher than dnssec-policy max-zone-ttl

Reject loading of zones with TTL higher than the max-zone-ttl
from the dnssec-policy.

With this change, any zone with a dnssec-policy in use will ignore
the max-zone-ttl option in zone/view/options.
bin/named/zoneconf.c