Bug 25163 - Allow DNS stub resolver configuration for current search list practices
Summary: Allow DNS stub resolver configuration for current search list practices
Status: NEW
Alias: None
Product: glibc
Classification: Unclassified
Component: network (show other bugs)
Version: unspecified
: P1 enhancement
Target Milestone: ---
Assignee: Not yet assigned to anyone
URL:
Keywords:
: 13935 (view as bug list)
Depends on:
Blocks:
 
Reported: 2019-11-05 16:41 UTC by Florian Weimer
Modified: 2026-08-13 16:57 UTC (History)
3 users (show)

See Also:
Host:
Target:
Build:
Last reconfirmed:
Project(s) to access:
ssh public key:
fweimer: security-

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Weimer 2019-11-05 16:41:15 UTC 
There is a set of ICANN recommendations for search list processing:

https://www.icann.org/en/groups/ssac/documents/sac-064-en.pdf

I do not think this is something that can be currently configured in /etc/resolv.conf. Eventually, we should also change the default, but the immediate goal is to provide configuration options to follow the recommendations if the system administrator desires that.

Defaulting the search list from the host name is also something that will need fixing. Currently, there does not seem to be a good way to disable the search list completely and also prevent dotless queries from reaching the root name servers.
Comment 1 Florian Weimer 2020-06-22 13:40:23 UTC 
*** Bug 13935 has been marked as a duplicate of this bug. ***
Comment 2 Andreas Schwab 2020-06-22 13:58:42 UTC 
*** Bug 13935 has been marked as a duplicate of this bug. ***