On Oct 20, Sven Geuer <[email protected]> wrote:
actually the dnsmasq package (not dnsmasq-base) applies /usr/share/dns/root.ds translating it appropriately.dnsmasq-base does not make use of /usr/share/dnsmasq-base/trust- anchors.conf by itself, so, a solution might be to simply drop /usr/share/dnsmasq-base/trust-anchors.conf from the dnsmasq-base package.
I see that dnsmasq-base Recommends dns-root-data: this is not really useful, it should depend on it. Also see #1150960.
And yes, it is better to ship the package with no trust anchors and DNSSEC disabled than with trust anchors that will get obsolete unless another package is also installed.
-- ciao, Marco
signature.asc
Description: PGP signature
