Muhammad Nuzaihan Bin Kamal Luddin
81ae2237c1
Based on this patch i had submitted to RedHat (https://issues.redhat.com/browse/RHEL-56280), i am submitting this patch to this upstream systemd. There is no way to explicitly enable/disable IPv6 AAAA queries. Problem was that i am using RHEL9 and some applications does not use a newer glibc that supports `no-aaaa` option in `/etc/resolv.conf`. So some applications will still resolve IPv6 AAAA even with `no-aaaa` option and it is inconsistent across the system where some work and some don't. So this systemd-resolved patch catch-all queries and disable IPv6 AAAA queries for all applications in the OS by having an option `RefuseRecordTypes=AAAA` to disable IPv6 AAAA queries. Although https://github.com/systemd/systemd/pull/28136 tries to fix this automatically but it still does not work with `net.ipv6.conf.all.disable_ipv6 = 1`. Also tried with explicitly removing the conditional and force set `family = AF_INET` and still resolves AAAA records. The issue is that i want to explicitly disable IPv6 AAAA queries instead of systemd-resolved to figure out itself which address family it is using, which always have problems.
System and Service Manager
Details
Most documentation is available on systemd's web site.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Code Map for information about this repository's layout and content.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list, join our IRC channel #systemd on libera.chat or Matrix channel
Stable branches with backported patches are available in the stable repo.
We have a security bug bounty program sponsored by the Sovereign Tech Fund hosted on YesWeHack
Repositories with distribution packages built from git main are available on OBS