FS#59391 - [systemd] don't disable DNSSEC
Attached to Project:
Arch Linux
Opened by nl6720 (nl6720) - Thursday, 19 July 2018, 15:36 GMT
Last edited by Christian Hesse (eworm) - Thursday, 26 July 2018, 11:56 GMT
Opened by nl6720 (nl6720) - Thursday, 19 July 2018, 15:36 GMT
Last edited by Christian Hesse (eworm) - Thursday, 26 July 2018, 11:56 GMT
|
Details
Description:
systemd's default DNSSEC mode is "allow-downgrade", but the systemd package is built with -Ddefault-dnssec=no . "allow-downgrade" is little better than "no". Please remove -Ddefault-dnssec=no from the PKGBUILD. Additional info: * package version(s) * config and/or log files etc. systemd 239.0-2 Steps to reproduce: grep DNSSEC /etc/systemd/resolved.conf resolvectl status |
This task depends upon
Closed by Christian Hesse (eworm)
Thursday, 26 July 2018, 11:56 GMT
Reason for closing: Implemented
Additional comments about closing: in SVN
Thursday, 26 July 2018, 11:56 GMT
Reason for closing: Implemented
Additional comments about closing: in SVN