upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-24 00:29:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix #1244: document that use of chroot requires trust anchor file to

Browse source 
be under chroot.


git-svn-id: file:///svn/unbound/trunk@4087 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2017-04-04 13:39:33 +00:00
parent d30ae35c62
commit 4321a363a4
2 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/Changelog
View file

@ -1,3 +1,7 @@
4 April 2017: Wouter
- Fix #1244: document that use of chroot requires trust anchor file to
be under chroot.
3 April 2017: Ralph 3 April 2017: Ralph
- Do not add current time twice to TTL before ECS cache store. - Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation. - Do not touch rrset cache after ECS cache message generation.

3
doc/unbound.conf.5.in
View file

@ -785,7 +785,8 @@ frequently. The initial file can be one with contents as described in
\fBtrust\-anchor\-file\fR. The file is written to when the anchor is updated, \fBtrust\-anchor\-file\fR. The file is written to when the anchor is updated,
so the unbound user must have write permission. Write permission to the file, so the unbound user must have write permission. Write permission to the file,
but also to the directory it is in (to create a temporary file, which is but also to the directory it is in (to create a temporary file, which is
necessary to deal with filesystem full events). necessary to deal with filesystem full events), it must also be inside the
chroot (if that is used).
.TP .TP
.B trust\-anchor: \fI<"Resource Record"> .B trust\-anchor: \fI<"Resource Record">
A DS or DNSKEY RR for a key to use for validation. Multiple entries can be A DS or DNSKEY RR for a key to use for validation. Multiple entries can be