From cd79eb0dedf5dbe7ae4fb37de8910e9fd3a4a741 Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Mon, 12 Oct 2020 20:50:43 +0200 Subject: [PATCH] resolv.conf.5: srcfix: rewrap source lines No content changes Signed-off-by: Michael Kerrisk --- man5/resolv.conf.5 | 32 ++++++++++++++++++-------------- 1 file changed, 18 insertions(+), 14 deletions(-) diff --git a/man5/resolv.conf.5 b/man5/resolv.conf.5 index 6f3de7faf..c6ebbe87a 100644 --- a/man5/resolv.conf.5 +++ b/man5/resolv.conf.5 @@ -168,7 +168,8 @@ The value for this option is silently capped to 15. .\" Since glibc 2.2 Sets the amount of time the resolver will wait for a response from a remote name server before retrying the -query via a different name server. This may +query via a different name server. +This may .BR not be the total time taken by any resolver API call and there is no guarantee that a single resolver API call maps to a single timeout. @@ -325,23 +326,26 @@ Sets .BR RES_TRUSTAD in .IR _res.options . -This option controls the AD bit behavior of the stub resolver. If a -validating resolver sets the AD bit in a response, it indicates that -the data in the response was verified according to the DNSSEC -protocol. In order to rely on the AD bit, the local system has to +This option controls the AD bit behavior of the stub resolver. +If a validating resolver sets the AD bit in a response, +it indicates that the data in the response was verified according +to the DNSSEC protocol. +In order to rely on the AD bit, the local system has to trust both the DNSSEC-validating resolver and the network path to it, -which is why an explicit opt-in is required. If the +which is why an explicit opt-in is required. +If the .B trust\-ad option is active, the stub resolver sets the AD bit in outgoing DNS -queries (to enable AD bit support), and preserves the AD bit in -responses. Without this option, the AD bit is not set in queries, and -it is always removed from responses before they are returned to the -application. This means that applications can trust the AD bit in -responses if the +queries (to enable AD bit support), and preserves the AD bit in responses. +Without this option, the AD bit is not set in queries, +and it is always removed from responses before they are returned to the +application. +This means that applications can trust the AD bit in responses if the .B trust\-ad -option has been set correctly. In glibc version 2.30 and earlier, the -AD is not set automatically in queries, and passed through unchanged -to applications in responses. +option has been set correctly. +In glibc version 2.30 and earlier, +the AD is not set automatically in queries, +and passed through unchanged to applications in responses. .RE .PP The \fIsearch\fP keyword of a system's \fIresolv.conf\fP file can be