HardenedBSD/usr.sbin/unbound
Dag-Erling Smørgrav 058a4e3419 Prevent resolvconf from updating /etc/resolv.conf. As Jakob Schlyter
pointed out, having additional nameservers listed in /etc/resolv.conf
can break DNSSEC verification by providing a false positive if unbound
returns SERVFAIL due to an invalid signature.  The downside is that
the domain / search path won't get updated either, but we can live
with that.

Approved by:	re (blanket)
2013-09-23 20:06:59 +00:00
..
anchor
checkconf
control
daemon
local-setup Prevent resolvconf from updating /etc/resolv.conf. As Jakob Schlyter 2013-09-23 20:06:59 +00:00
Makefile Add a setup script for unbound(8) called local-unbound-setup. It 2013-09-23 04:36:51 +00:00
Makefile.inc