Package: systemd Version: 245.6-3 Severity: wishlist Tags: patch X-Debbugs-Cc: jfle...@arcaik.net
Since glibc 2.31, the resolvers in /etc/resolve.conf are not trusted anymore and the AD flag is stripped from their responses. As systemd-resolved is listening on a loopback interface, the `trust-ad` option was added to its stub resolve.conf file by upstream commit a742f98[^1]. It would be great if this commit could be backported to systemd 245 in Sid, waiting for version 246 to be released by upstream. [^1]: https://github.com/systemd/systemd/commit/a742f9828ea73d9c2c9bafe701c10fe60f058012 -- Package-specific info: -- System Information: Debian Release: bullseye/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.7.0-1-amd64 (SMP w/8 CPU threads) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages systemd depends on: ii adduser 3.118 ii libacl1 2.2.53-8 ii libapparmor1 2.13.4-3 ii libaudit1 1:2.8.5-3+b1 ii libblkid1 2.35.2-7 ii libc6 2.31-1 ii libcap2 1:2.36-1 ii libcrypt1 1:4.4.16-1 ii libcryptsetup12 2:2.3.3-1 ii libgcrypt20 1.8.6-2 ii libgnutls30 3.6.14-2+b1 ii libgpg-error0 1.38-2 ii libidn2-0 2.3.0-1 ii libip4tc2 1.8.5-2 ii libkmod2 27+20200310-2 ii liblz4-1 1.9.2-2 ii liblzma5 5.2.4-1+b1 ii libmount1 2.35.2-7 ii libpam0g 1.3.1-5 ii libpcre2-8-0 10.34-7 ii libseccomp2 2.4.3-1+b1 ii libselinux1 3.1-2 ii libsystemd0 245.6-3 ii mount 2.35.2-7 ii systemd-timesyncd [time-daemon] 245.6-3 ii util-linux 2.35.2-7 Versions of packages systemd recommends: ii dbus 1.12.20-1 Versions of packages systemd suggests: ii policykit-1 0.105-28 pn systemd-container <none> Versions of packages systemd is related to: pn dracut <none> ii initramfs-tools 0.137 ii libnss-systemd 245.6-3 ii libpam-systemd 245.6-3 ii udev 245.6-3 -- Configuration Files: /etc/systemd/resolved.conf changed [not included] -- no debconf information