LDP
/
man-pages
mirror of https://github.com/mkerrisk/man-pages
0
1
Fork 0
Code Releases Activity

resolv.conf.5: srcfix: rewrap source lines 

No content changes

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2020-10-12 20:50:43 +02:00
parent a3f91ca97b
commit cd79eb0ded
1 changed files with 18 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
man5/resolv.conf.5
View File

@ -168,7 +168,8 @@ The value for this option is silently capped to 15.
.\" Since glibc 2.2
Sets the amount of time the resolver will wait for a
response from a remote name server before retrying the
query via a different name server. This may
query via a different name server.
This may
.BR not
be the total time taken by any resolver API call and there is no
guarantee that a single resolver API call maps to a single timeout.
@ -325,23 +326,26 @@ Sets
.BR RES_TRUSTAD
in
.IR _res.options .
This option controls the AD bit behavior of the stub resolver. If a
validating resolver sets the AD bit in a response, it indicates that
the data in the response was verified according to the DNSSEC
protocol. In order to rely on the AD bit, the local system has to
This option controls the AD bit behavior of the stub resolver.
If a validating resolver sets the AD bit in a response,
it indicates that the data in the response was verified according
to the DNSSEC protocol.
In order to rely on the AD bit, the local system has to
trust both the DNSSEC-validating resolver and the network path to it,
which is why an explicit opt-in is required. If the
which is why an explicit opt-in is required.
If the
.B trust\-ad
option is active, the stub resolver sets the AD bit in outgoing DNS
queries (to enable AD bit support), and preserves the AD bit in
responses. Without this option, the AD bit is not set in queries, and
it is always removed from responses before they are returned to the
application. This means that applications can trust the AD bit in
responses if the
queries (to enable AD bit support), and preserves the AD bit in responses.
Without this option, the AD bit is not set in queries,
and it is always removed from responses before they are returned to the
application.
This means that applications can trust the AD bit in responses if the
.B trust\-ad
option has been set correctly. In glibc version 2.30 and earlier, the
AD is not set automatically in queries, and passed through unchanged
to applications in responses.
option has been set correctly.
In glibc version 2.30 and earlier,
the AD is not set automatically in queries,
and passed through unchanged to applications in responses.
.RE
.PP
The \fIsearch\fP keyword of a system's \fIresolv.conf\fP file can be