]> git.ipfire.org Git - thirdparty/bind9.git/commit
Reject zones with TTL higher than dnssec-policy max-zone-ttl
authorMatthijs Mekking <matthijs@isc.org>
Wed, 13 Jul 2022 08:28:59 +0000 (10:28 +0200)
committerEvan Hunt <each@isc.org>
Fri, 22 Jul 2022 20:13:24 +0000 (13:13 -0700)
commit793554c6ce29814f99a601f7da0f86a21cfe49ec
tree1a195065a6dfaa6787fccb3ea5dae7af8e6980b0
parent9c872756c3810ba8034e4fdfdb89190795ee1e42
Reject zones with TTL higher than dnssec-policy max-zone-ttl

Reject loading of zones with TTL higher than the max-zone-ttl
from the dnssec-policy.

With this change, any zone with a dnssec-policy in use will ignore
the max-zone-ttl option in zone/view/options.
bin/named/zoneconf.c