picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
Systemd/src
History
Lennart Poettering 4cb94977ed resolved: don't consider NSEC/NSEC3 RRs as "pimary" for transactions 
So far, abritrary NSEC and NSEC3 RRs were implicitly consider "primary" for any transaction, meaning we'd abort the
transaction immediately if we couldn't validate it. With this patch this logic is removed, and the NSEC/NSEC3 RRs will
not be considered primary anymore. This has the effect that they will be dropped from the message if they don't
validate, but processing continues. This is safe to do, as they are required anyway to validate positive wildcard and
negative responses, and if they are missing then, then message will be considered unsigned, which hence means the
outcome is effectively the same.

This is benefical in case the server sends us NSEC/NSEC3 RRs that are not directly related to the lookup we did, but
simply auxiliary information. Previously, if we couldn't authenticate those RRs we'd fail the entire lookup while with
this change we'll simply drop the auxiliary information and proceed without it.
2016-01-25 17:19:20 +01:00
..
ac-power
activate Merge pull request #2080 from chaloulo/split-mode-host-remove-port-from-journal-filename 2016-01-22 09:47:59 +01:00
analyze analyze: verify verifies templates too 2015-12-14 07:11:03 +00:00
ask-password strv: Add _cleanup_strv_free_erase_ and _cleanup_string_free_erase_ 2015-10-19 23:13:07 +02:00
backlight tree-wide: check if errno is greater than zero (2) 2016-01-13 15:10:17 -05:00
basic resolved: properly handle LLMNR/TCP connection errors 2016-01-25 17:19:19 +01:00
binfmt defs: rework CONF_DIRS_NULSTR() macro 2015-11-10 17:31:31 +01:00
boot bootctl: use DRAW_TREE_RIGHT rather than hard-coded UTF-8 character 2016-01-20 13:14:14 +01:00
bootchart tree-wide: use xsprintf() where applicable 2016-01-12 15:36:32 +01:00
bus-proxyd tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
cgls tests: turn check if manager cannot be intialized into macro 2015-12-02 09:50:00 -05:00
cgroups-agent tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
cgtop tree-wide: use xsprintf() where applicable 2016-01-12 15:36:32 +01:00
compat-libs
core core: normalize error handling a bit, in setup_pam() 2016-01-25 17:19:19 +01:00
cryptsetup tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
dbus1-generator treewide: apply errno.cocci 2015-11-09 20:01:06 +01:00
debug-generator debug-generator: respect kernel parameters for default unit setting 2015-11-03 14:47:39 +03:00
delta treewide: apply errno.cocci 2015-11-09 20:01:06 +01:00
detect-virt detect-virt: add new --chroot switch to detect chroot() environments 2015-10-27 13:25:57 +01:00
escape util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
firstboot tree-wide: check if errno is greater then zero 2016-01-13 15:09:55 -05:00
fsck tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
fstab-generator fstab-generator: fix ordering of /sysroot/usr mount 2016-01-17 10:58:40 +01:00
getty-generator tree-wide: check if errno is greater then zero 2016-01-13 15:09:55 -05:00
gpt-auto-generator tree-wide: group include of libudev.h with sd-* 2015-11-17 07:06:08 +01:00
hibernate-resume tree-wide: sort includes 2015-11-16 22:09:36 +01:00
hostname treewide: fix typos and indentation 2015-12-14 15:53:11 +01:00
hwdb tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
import tree-wide: check if errno is greater then zero 2016-01-13 15:09:55 -05:00
initctl tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
journal Merge pull request #2318 from vcaputo/coalesce-ftruncates-redux 2016-01-23 22:09:51 -05:00
journal-remote Merge pull request #2425 from yuwata/journal-remote-v4 2016-01-24 11:49:31 -05:00
kernel-install
libsystemd resolve: generate a nice clean error when clients try to resolve a name when the network is down 2016-01-25 15:59:40 +01:00
libsystemd-network Merge pull request #2391 from keszybz/coverity 2016-01-21 11:50:08 +01:00
libudev libudev: simplify udev_device_ensure_usec_initialized a bit 2015-12-07 00:44:14 -05:00
locale tree-wide: check if errno is greater then zero 2016-01-13 15:09:55 -05:00
login logind,machined: bump TasksMax= 2016-01-25 15:59:39 +01:00
machine logind,machined: bump TasksMax= 2016-01-25 15:59:39 +01:00
machine-id-setup core: Add machine-id setting 2016-01-12 22:10:41 +00:00
modules-load defs: rework CONF_DIRS_NULSTR() macro 2015-11-10 17:31:31 +01:00
network Merge pull request #2391 from keszybz/coverity 2016-01-21 11:50:08 +01:00
notify util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
nspawn nspawn: fix memory leak 2016-01-25 12:06:38 +01:00
nss-myhostname util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
nss-mymachines nss-mymachines: link less 2015-11-27 21:00:44 -05:00
nss-resolve nss-resolve: link less 2015-11-27 21:00:44 -05:00
path util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
quotacheck tree-wide: sort includes 2015-11-16 22:09:36 +01:00
random-seed util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
rc-local-generator treewide: apply errno.cocci 2015-11-09 20:01:06 +01:00
remount-fs remount-fs: modernize coding style a bit 2015-11-17 00:52:10 +01:00
reply-password util-lib: split out fd-related operations into fd-util.[ch] 2015-10-25 13:19:18 +01:00
resolve resolved: don't consider NSEC/NSEC3 RRs as "pimary" for transactions 2016-01-25 17:19:20 +01:00
rfkill tree-wide: group include of libudev.h with sd-* 2015-11-17 07:06:08 +01:00
run tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
shared Merge pull request #2357 from keszybz/warnings-2 2016-01-19 15:09:53 +01:00
sleep util-lib: split out fd-related operations into fd-util.[ch] 2015-10-25 13:19:18 +01:00
socket-proxy journal-remote: split-mode=host, remove port from journal filename 2015-12-01 19:29:59 +02:00
sysctl defs: rework CONF_DIRS_NULSTR() macro 2015-11-10 17:31:31 +01:00
system-update-generator util-lib: move a number of fs operations into fs-util.[ch] 2015-10-27 13:25:56 +01:00
systemctl systemctl: Allow 'edit' and 'cat' on unloaded units 2016-01-21 18:22:55 -05:00
systemd resolved: log recognizably about DNSSEC downgrades 2016-01-25 17:19:19 +01:00
sysusers sysusers: use GID_FMT and UID_FMT instead of %d 2016-01-21 16:35:19 +01:00
sysv-generator sysv-generator: do not join dependencies on one line, split them 2016-01-21 12:53:14 +01:00
test test-date: check return value 2016-01-20 18:55:56 -05:00
timedate tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
timesync timesyncd: use (void) to mark ignored value 2016-01-20 18:55:56 -05:00
tmpfiles tree-wide: check if errno is greater than zero (2) 2016-01-13 15:10:17 -05:00
tty-ask-password-agent tty-ask-password-agent: fix typo in error message 2015-11-05 13:44:01 +01:00
udev udevd: do not clean up fds in main 2016-01-23 11:45:22 -05:00
update-done util-lib: split out IO related calls to io-util.[ch] 2015-10-26 01:24:38 +01:00
update-utmp tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
user-sessions user-sessions: make sure /run/nologin has correct SELinux label 2015-12-04 22:01:17 +01:00
vconsole tree-wide: use xsprintf() where applicable 2016-01-12 15:36:32 +01:00
.gitignore
Makefile