unbound.service.in: Disable ProtectKernelTunables again #565
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
@wcawijngaards could you take a look at this one? |
wcawijngaards
approved these changes
Nov 5, 2021
wcawijngaards
added a commit
that referenced
this pull request
Nov 5, 2021
- Merge #565: unbound.service.in: Disable ProtectKernelTunables again.
|
Sorry, I should have looked at the file history. Explicitly disabling is a good idea indeed. |
jedisct1
added a commit
to jedisct1/unbound
that referenced
this pull request
Nov 18, 2021
* nlnet/master: (23 commits) Document PR NLnetLabs#563 to changelog Clarify KEEPALIVE EDNS0 option operation Make explicit whether edns options are parsed from queries or responses add missing return code Remove wrongly added EDE comments Update util/data/msgparse.c add potential EDE spots complete renaming of the modules edns list Apply suggestions from code review Changelog note for NLnetLabs#565 - Merge NLnetLabs#565: unbound.service.in: Disable ProtectKernelTunables again. - Fix to remove unused code from rpz resolve client and action function. - Fix analyzer review failure in rpz action override code to not crash on unlocking the local zone lock. - Fix for NLnetLabs#558: clear the UB_EV_TIMEOUT bit before adding an event. - Fix for NLnetLabs#558: fix loop in comm_point->tcp_free when a comm_point is reclaimed more than once during callbacks. - Fix that forward-zone name is documented as the full name of the zone. It is not relative but a fully qualified domain name. Disable ProtectKernelTunables again - Fix NLnetLabs#552: Unbound assumes index.html exists on RPZ host. Fix keepalive logic Move option handling to parse-time split edns_data.opt_list in opt_list_in and opt_list_out ...
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This option was removed in ff8fd0b but reintroduced in c32b9e4
Disable it with commentary in hope to prevent slipping it in again.
cc: @ArchangeGabriel