[Dnssec-trigger] [PATCH] dnssec-trigger-script: Don't configure RFC1918 zones if there are no global forwarders

W.C.A. Wijngaards wouter at nlnetlabs.nl
Tue Apr 7 12:57:39 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Tomas,

Applied, that must have been a painful issue for the user.

Best regards, Wouter

On 02/04/15 20:19, Tomas Hozza wrote:
> Hi.
> 
> I'm attaching patch for issue caught by ABRT - Automatic Bug
> Reporting Tool.
> 
> Previously the script tried to install RFC1918 zones even if there 
> were no global forwarders from NetworkManager. This lead to
> removing the zones from Unbound which is good, but not from zones
> Store. Also on subsequent calls the script tried to remove the
> zones from Unbound again and crashed with traceback.
> 
> When a machine had configuration of RFC1918 zones enabled by
> default, the script crashed also during boot, if the machine was
> not connected to any network.
> 
> Please also see
> https://bugzilla.redhat.com/show_bug.cgi?id=1205864
> 
> This change makes the script to add RFC1918 zones only if there are
> global forwarders, otherwise it will remove them from Unbound and
> zones Store. If zones are not configured in Unbound or are not 
> present in the zones Store, it will do nothing.
> 
> Regards,
> 
> 
> 
> _______________________________________________ dnssec-trigger
> mailing list dnssec-trigger at NLnetLabs.nl 
> http://open.nlnetlabs.nl/mailman/listinfo/dnssec-trigger
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=2iBP
-----END PGP SIGNATURE-----



More information about the dnssec-trigger mailing list