picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
Systemd/src
History
Lennart Poettering 61ecb465b1 resolved: turn on DNSSEC by default, unless configured otherwise 
Let's make sure DNSSEC gets more testing, by defaulting DNSSEC to
"allow-downgrade" mode. Since distros should probably not ship DNSSEC enabled
by default add a configure switch to disable this again.

DNSSEC in "allow-downgrade" mode should mostly work without affecting user
experience. There's one exception: some captive portal systems rewrite DNS in
order to redirect HTTP traffic to the captive portal. If these systems
implement DNS servers that are otherwise DNSSEC-capable (which in fact is
pretty unlikely, but still...), then this will result in the captive portal
being inaccessible. To fix this support in NetworkManager (or any other network
management solution that does captive portal detection) is required, which
simply turns off DNSSEC during the captive portal detection, and resets it back
to the default (i.e. on) after captive portal authentication is complete.
2016-02-16 15:22:05 +01:00
..
ac-power tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
activate activate: allow multiple, possibly invalid, fd names 2016-02-13 11:54:39 -05:00
analyze tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
ask-password tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
backlight tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
basic time-util: Rename and fix call of deserialize_timestamp_value() 2016-02-15 23:26:34 +01:00
binfmt tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
boot sd-boot: put hashed kernel command line in a PCR of the TPM 2016-02-11 17:48:09 +01:00
bootchart tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
cgls tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
cgroups-agent tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
cgtop tree-wide: make more global variables static 2016-02-13 12:28:28 +01:00
core service: remove unnecessary check 2016-02-13 23:55:15 +06:00
coredump coredump: dump priviliges when processing system coredumps 2016-02-10 16:09:24 +01:00
cryptsetup tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
dbus1-generator tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
debug-generator tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
delta delta: minor coding style fixes 2016-02-11 16:25:54 +01:00
detect-virt tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
escape tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
firstboot tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
fsck tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
fstab-generator tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
getty-generator tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
gpt-auto-generator tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
hibernate-resume tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
hostname tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
hwdb tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
import build-sys: drop aufs-util.[ch] 2016-02-13 12:03:16 +01:00
initctl tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
journal Merge pull request #2589 from keszybz/resolve-tool-2 2016-02-13 11:15:41 +01:00
journal-remote tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
kernel-install
libsystemd Merge pull request #2618 from zonque/busproxy-removal 2016-02-15 14:54:09 +01:00
libsystemd-network dhcp: assert the success of sd_event_now() 2016-02-15 16:20:55 +01:00
libudev libudev: simplify udev_device_ensure_usec_initialized a bit 2015-12-07 00:44:14 -05:00
locale tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
login time-util: Rename and fix call of deserialize_timestamp_value() 2016-02-15 23:26:34 +01:00
machine time-util: Rename and fix call of deserialize_timestamp_value() 2016-02-15 23:26:34 +01:00
machine-id-setup tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
modules-load tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
network tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
notify tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
nspawn Merge pull request #2589 from keszybz/resolve-tool-2 2016-02-13 11:15:41 +01:00
nss-myhostname tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
nss-mymachines nss-mymachines: never resolve unmapped UIDs/GIDs 2016-02-10 23:42:34 +01:00
nss-resolve tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
path tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
quotacheck tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
random-seed tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
rc-local-generator tree-wide: make more global variables static 2016-02-13 12:28:28 +01:00
remount-fs tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
reply-password tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
resolve resolved: turn on DNSSEC by default, unless configured otherwise 2016-02-16 15:22:05 +01:00
rfkill tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
run tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
shared systemctl: include -M or -H arguments in the hint 2016-02-15 15:23:45 -05:00
sleep tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
socket-proxy tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
stdio-bridge remove bus-proxyd 2016-02-12 19:10:01 +01:00
sysctl tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
system-update-generator tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
systemctl systemctl: include -M or -H arguments in the hint 2016-02-15 15:23:45 -05:00
systemd Typo 2016-02-11 21:52:02 -05:00
sysusers tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
sysv-generator tree-wide: make more global variables static 2016-02-13 12:28:28 +01:00
test Merge pull request #2618 from zonque/busproxy-removal 2016-02-15 14:54:09 +01:00
timedate tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
timesync tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
tmpfiles tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
tty-ask-password-agent Merge pull request #2495 from heftig/master 2016-02-10 16:53:49 +01:00
udev tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
update-done tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
update-utmp tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
user-sessions tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
vconsole tree-wide: remove Emacs lines from all files 2016-02-10 13:41:57 +01:00
.gitignore
Makefile