From: YmrDtnJu Date: Fri, 5 Jun 2020 13:36:58 +0000 (+0200) Subject: resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver X-Git-Tag: v245.7~92 X-Git-Url: http://git-history.diyao.me/?a=commitdiff_plain;h=303a0e4a4c6e9f609545736371fd70e3d3d9a4e1;p=systemd%2F.git resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver glibc 2.31 strips the AD flag, unless either the application specifies RES_TRUSTAD or the options in resolv.conf contain trust-ad. See https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD (cherry picked from commit a742f9828ea73d9c2c9bafe701c10fe60f058012) --- diff --git a/src/resolve/resolv.conf b/src/resolve/resolv.conf index c3079aca1d..dc5ac05532 100644 --- a/src/resolve/resolv.conf +++ b/src/resolve/resolv.conf @@ -15,4 +15,4 @@ # operation for /etc/resolv.conf. nameserver 127.0.0.53 -options edns0 +options edns0 trust-ad diff --git a/src/resolve/resolved-resolv-conf.c b/src/resolve/resolved-resolv-conf.c index f5fc13563d..1896ce3379 100644 --- a/src/resolve/resolved-resolv-conf.c +++ b/src/resolve/resolved-resolv-conf.c @@ -325,7 +325,7 @@ static int write_stub_resolv_conf_contents(FILE *f, OrderedSet *dns, OrderedSet "# operation for /etc/resolv.conf.\n" "\n" "nameserver 127.0.0.53\n" - "options edns0\n", f); + "options edns0 trust-ad\n", f); if (!ordered_set_isempty(domains)) write_resolv_conf_search(domains, f);