You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Yousong Zhou 064dc1e81b dnsmasq: abort when dnssec requested but not available
Before this commit, if uci option "dnssec" was set, we pass "--dnssec"
and friends to dnsmasq, let it start and decide whether to quit and
whether to emit message for diagnosis

  # dnsmasq --dnssec; echo $?
  dnsmasq: DNSSEC not available: set HAVE_DNSSEC in src/config.h
  1

DNSSEC as a feature is different from others like dhcp, tftp in that
it's a security feature.  Better be explicit.  With this change
committed, we make it so by not allowing it in the first in the
initscript, should dnsmasq later decides to not quit (not likely) or
quit without above explicit error (unlikely but less so ;)

So this is just being proactive.  on/off choices with uci option
"dnssec" are still available like before

Link: https://github.com/openwrt/openwrt/pull/3265#issuecomment-667795302
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
4 years ago
..
50-dnsmasq-migrate-resolv-conf-auto.sh dnsmasq: fix uci-defaults script to exit 0 so it is cleaned up 4 years ago
dhcp-script.sh dnsmasq: add dhcp-script hook for other packages 7 years ago
dhcp.conf dnsmasq: switch to /tmp/resolv.conf.d/resolv.conf.auto 4 years ago
dhcpbogushostname.conf dnsmasq: add dhcp-ignore-names support - CERT VU#598349 6 years ago
dnsmasq.conf packages: sort network related packages into package/network/ 12 years ago
dnsmasq.init dnsmasq: abort when dnssec requested but not available 4 years ago
dnsmasq_acl.json dnsmasq: add ubus notifications for new leases 7 years ago
dnsmasqsec.hotplug dnsmasq: hotplug script tidyup 4 years ago
rfc6761.conf dnsmasq: remove example domains from rfc6761.conf (FS#1447) 6 years ago