Add non-IN RR classes to list of unsupported configurations

This adds a note to the security documentation that configuring
resources with non-Internet DNS classes (CHAOS, HESIOD, ...) is not
a supported configuration and could potentially cause issues.

diff --git a/doc/arm/security.inc.rst b/doc/arm/security.inc.rst
index 949d70eff12c7002774510ad06bfac95f81b4dc9..a596f4b82026a309a3a6acf0348b55ec6409ecbd 100644 (file)
--- a/doc/arm/security.inc.rst
+++ b/doc/arm/security.inc.rst
@@ -30,6 +30,8 @@ can potentially cause crashes, incorrect data handling, or corruption:
 - Clients communicating via the :any:`controls` socket using configured keys
 - Access to :any:`statistics-channels` from untrusted clients
 - Sockets used for :any:`update-policy` type `external`
+- Configuring resources (views, zones, ...) with non-Internet (IN) Resource
+  Record classes (like CHAOS or HESIOD)
 
 Certain aspects of the DNS protocol are left unspecified, such as the handling of
 responses from DNS servers which do not fully conform to the DNS protocol. For