resolved: introduce support for per-interface negative trust anchors
This commit is contained in:
@@ -318,6 +318,20 @@
|
||||
<citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
<varlistentry>
|
||||
<term><varname>DNSSECNegativeTrustAnchors=</varname></term>
|
||||
<listitem><para>A space-separated list of DNSSEC negative
|
||||
trust anchor domains. If specified and DNSSEC is enabled,
|
||||
look-ups done via the interface's DNS server will be subject
|
||||
to the list of negative trust anchors, and not require
|
||||
authentication for the specified domains, or anything below
|
||||
it. Use this to disable DNSSEC authentication for specific
|
||||
private domains, that cannot be proven valid using the
|
||||
Internet DNS hierarchy. Defaults to the empty list. This
|
||||
setting is read by
|
||||
<citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
<varlistentry>
|
||||
<term><varname>LLDP=</varname></term>
|
||||
<listitem>
|
||||
|
||||
Reference in New Issue
Block a user