From: Ondřej Surý Date: Wed, 11 Mar 2026 18:18:32 +0000 (+0100) Subject: Add non-IN RR classes to list of unsupported configurations X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=7b34d6083331dcdfd08881c646a6c6092d838555;p=thirdparty%2Fbind9.git Add non-IN RR classes to list of unsupported configurations This adds a note to the security documentation that configuring resources with non-Internet DNS classes (CHAOS, HESIOD, ...) is not a supported configuration and could potentially cause issues. --- diff --git a/doc/arm/security.inc.rst b/doc/arm/security.inc.rst index 949d70eff12..a596f4b8202 100644 --- a/doc/arm/security.inc.rst +++ b/doc/arm/security.inc.rst @@ -30,6 +30,8 @@ can potentially cause crashes, incorrect data handling, or corruption: - Clients communicating via the :any:`controls` socket using configured keys - Access to :any:`statistics-channels` from untrusted clients - Sockets used for :any:`update-policy` type `external` +- Configuring resources (views, zones, ...) with non-Internet (IN) Resource + Record classes (like CHAOS or HESIOD) Certain aspects of the DNS protocol are left unspecified, such as the handling of responses from DNS servers which do not fully conform to the DNS protocol. For