LDP
/
man-pages
mirror of https://github.com/mkerrisk/man-pages
0
1
Fork 0
Code Releases Activity

resolv.conf.5: srcfix: rewrap source lines 

No content changes

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2020-10-12 20:50:43 +02:00
parent a3f91ca97b
commit cd79eb0ded
1 changed files with 18 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
man5/resolv.conf.5
View File

@ -168,7 +168,8 @@ The value for this option is silently capped to 15.
.\" Since glibc 2.2 .\" Since glibc 2.2
Sets the amount of time the resolver will wait for a Sets the amount of time the resolver will wait for a
response from a remote name server before retrying the response from a remote name server before retrying the
query via a different name server. This may query via a different name server.
This may
.BR not .BR not
be the total time taken by any resolver API call and there is no be the total time taken by any resolver API call and there is no
guarantee that a single resolver API call maps to a single timeout. guarantee that a single resolver API call maps to a single timeout.
@ -325,23 +326,26 @@ Sets
.BR RES_TRUSTAD .BR RES_TRUSTAD
in in
.IR _res.options . .IR _res.options .
This option controls the AD bit behavior of the stub resolver. If a This option controls the AD bit behavior of the stub resolver.
validating resolver sets the AD bit in a response, it indicates that If a validating resolver sets the AD bit in a response,
the data in the response was verified according to the DNSSEC it indicates that the data in the response was verified according
protocol. In order to rely on the AD bit, the local system has to to the DNSSEC protocol.
In order to rely on the AD bit, the local system has to
trust both the DNSSEC-validating resolver and the network path to it, trust both the DNSSEC-validating resolver and the network path to it,
which is why an explicit opt-in is required. If the which is why an explicit opt-in is required.
If the
.B trust\-ad .B trust\-ad
option is active, the stub resolver sets the AD bit in outgoing DNS option is active, the stub resolver sets the AD bit in outgoing DNS
queries (to enable AD bit support), and preserves the AD bit in queries (to enable AD bit support), and preserves the AD bit in responses.
responses. Without this option, the AD bit is not set in queries, and Without this option, the AD bit is not set in queries,
it is always removed from responses before they are returned to the and it is always removed from responses before they are returned to the
application. This means that applications can trust the AD bit in application.
responses if the This means that applications can trust the AD bit in responses if the
.B trust\-ad .B trust\-ad
option has been set correctly. In glibc version 2.30 and earlier, the option has been set correctly.
AD is not set automatically in queries, and passed through unchanged In glibc version 2.30 and earlier,
to applications in responses. the AD is not set automatically in queries,
and passed through unchanged to applications in responses.
.RE .RE
.PP .PP
The \fIsearch\fP keyword of a system's \fIresolv.conf\fP file can be The \fIsearch\fP keyword of a system's \fIresolv.conf\fP file can be