diff options
| author | Lennart Poettering <lennart@poettering.net> | 2021-02-24 17:04:55 +0100 |
|---|---|---|
| committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2021-03-26 18:21:41 +0100 |
| commit | 9ddf099f306b79e74b2c60acd4c762a799d76835 (patch) | |
| tree | 6b2f038fb3b26a8f6376dd27bf4103b972227003 /src/resolve/resolved-dns-stub.c | |
| parent | use the right member to define property (diff) | |
| download | systemd-9ddf099f306b79e74b2c60acd4c762a799d76835.tar.xz systemd-9ddf099f306b79e74b2c60acd4c762a799d76835.zip | |
resolved: tweak how we signal authoritative answers
let's make sure we set the "aa" bit in the stub only if we answer with
fully authoritative data. For this ensure:
1. Either all data is synthetic, including all CNAME/DNAME redirects
2. Or all data comes from the local trust anchor or the local zones
(i.e. not the network or the cache)
Follow-up for 4ad017cda57b04b9d65e7da962806cfcc50b5f0c
Diffstat (limited to 'src/resolve/resolved-dns-stub.c')
| -rw-r--r-- | src/resolve/resolved-dns-stub.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/resolve/resolved-dns-stub.c b/src/resolve/resolved-dns-stub.c index 177b88e025..602720bf50 100644 --- a/src/resolve/resolved-dns-stub.c +++ b/src/resolve/resolved-dns-stub.c @@ -580,7 +580,7 @@ static int dns_stub_send_reply( DNS_PACKET_ID(q->request_packet), rcode, truncated, - dns_query_fully_synthetic(q), + dns_query_fully_authoritative(q), !!q->request_packet->opt, edns0_do, DNS_PACKET_AD(q->request_packet) && dns_query_fully_authenticated(q), |