dilim/systemd
1
0 Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-11-06 13:27:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
v261.5
systemd/src/resolve
T
History
Ibrahim Issa 0403cfd4fd resolved: return NXDOMAIN for .onion domains 
RFC 7686 mandates that name resolution APIs MUST respond to .onion
names with NXDOMAIN to prevent leaks to the resolving name server.
This intercepts .onion queries and synthesizes an NXDOMAIN response locally.

Fixes #42980

(cherry picked from commit d0cf688a62)
(cherry picked from commit 03a92ca415)
2026-11-05 14:48:09 +00:00
..
fuzz-dns-packet.c
resolved: move DNS RR/key/answer/question/packet tools to shared/
2025-10-20 10:35:23 +02:00
fuzz-dns-packet.options
…
fuzz-etc-hosts.c
…
fuzz-resource-record.c
resolved: move DNS RR/key/answer/question/packet tools to shared/
2025-10-20 10:35:23 +02:00
meson.build
resolved: don't send conflict advisories on mDNS scopes
2026-11-05 14:30:22 +00:00
org.freedesktop.resolve1.conf
…
org.freedesktop.resolve1.policy
resolved: add missing polkit checks on FlushCaches and ResetServerFeatures D-Bus methods
2026-05-19 08:29:34 +02:00
org.freedesktop.resolve1.service
…
resolv.conf
…
resolvconf-compat.c
resolvconf: reject malformed stdin without changing link state
2026-09-09 10:08:20 +01:00
resolvconf-compat.h
…
resolvectl.c
resolvectl: reject --raw for regular lookups
2026-09-09 10:08:20 +01:00
resolvectl.h
tree-wide: Introduce sd-forward.h and shared-forward.h headers
2025-10-16 17:00:29 +02:00
resolved-bus.c
resolved: avoid dangling hashmap entry on RegisterService failure
2026-06-26 11:40:48 +01:00
resolved-bus.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-conf.c
resolved: add configurable DNS cache size
2026-05-18 11:45:03 +01:00
resolved-conf.h
resolved: add configurable DNS cache size
2026-05-18 11:45:03 +01:00
resolved-dns-browse-services.c
resolve: stop timer event source and detach from browser when a dnssd service is removed
2026-10-17 12:00:59 +01:00
resolved-dns-browse-services.h
resolve: stop timer event source and detach from browser when a dnssd service is removed
2026-10-17 12:00:59 +01:00
resolved-dns-cache.c
resolved: only clamp cache TTLs when actually serving stale data
2026-09-09 10:08:21 +01:00
resolved-dns-cache.h
resolved: only clamp cache TTLs when actually serving stale data
2026-09-09 10:08:21 +01:00
resolved-dns-delegate-bus.c
clang-tidy: Fix all remaining misc-include-cleaner violations
2025-11-22 10:19:41 +01:00
resolved-dns-delegate-bus.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-dns-delegate-gperf.gperf
dns-delegates: add support for setting a firewall mark
2026-02-16 11:09:48 +01:00
resolved-dns-delegate.c
resolved: keep parsing DNS delegate servers after duplicates
2026-09-09 10:08:20 +01:00
resolved-dns-delegate.h
dns-delegates: add support for setting a firewall mark
2026-02-16 11:09:48 +01:00
resolved-dns-dnssec.c
dns-rr: invalidate wire format after changing ttl
2026-07-19 22:34:05 +01:00
resolved-dns-dnssec.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
resolved-dns-query.c
resolved: preserve unchanged question on asymmetric redirect
2026-07-19 22:34:06 +01:00
resolved-dns-query.h
tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends
2026-01-02 04:04:19 +09:00
resolved-dns-scope.c
resolved: don't send conflict advisories on mDNS scopes
2026-11-05 14:30:22 +00:00
resolved-dns-scope.h
resolved: only send goodbye for the RRs of the service being unregistered
2026-09-09 10:08:21 +01:00
resolved-dns-search-domain.c
resolved: add concept of delegating lookups below certain domains to specific DNS servers
2025-05-20 23:00:03 +02:00
resolved-dns-search-domain.h
tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends
2026-01-02 04:04:19 +09:00
resolved-dns-server.c
resolved: only restart the feature grace period on feature level changes
2026-11-05 13:58:21 +00:00
resolved-dns-server.h
resolved: only restart the feature grace period on feature level changes
2026-11-05 13:58:21 +00:00
resolved-dns-stream.c
iovec-util: rename iovec_increment() -> iovec_inc_many()
2026-04-19 16:17:47 +09:00
resolved-dns-stream.h
tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends
2026-01-02 04:04:19 +09:00
resolved-dns-stub.c
resolved: truncate bypass replies at RR boundaries
2026-11-05 14:30:22 +00:00
resolved-dns-stub.h
resolved: truncate bypass replies at RR boundaries
2026-11-05 14:30:22 +00:00
resolved-dns-synthesize.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
resolved-dns-synthesize.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-dns-transaction.c
resolved: don't validate replies to queries that were sent without DO
2026-11-05 13:58:21 +00:00
resolved-dns-transaction.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
resolved-dns-trust-anchor.c
resolved: explain why .alt is not a negative trust anchor
2026-11-05 14:48:09 +00:00
resolved-dns-trust-anchor.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
resolved-dns-zone.c
resolved: roll back partial DNS zone publication
2026-07-19 22:34:06 +01:00
resolved-dns-zone.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-dnssd-bus.c
resolved: split out dnssd_registered_service_unregister() helper
2026-09-09 10:08:21 +01:00
resolved-dnssd-bus.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
resolved-dnssd-gperf.gperf
resolve: shorten conf parser name and realign gperf table
2025-09-17 22:07:27 +09:00
resolved-dnssd.c
resolved: only send goodbye for the RRs of the service being unregistered
2026-09-09 10:08:21 +01:00
resolved-dnssd.h
resolved: split out dnssd_registered_service_unregister() helper
2026-09-09 10:08:21 +01:00
resolved-dnstls.c
resolved: honour per-link DNSOverTLS=yes for certificate verification
2026-07-19 22:34:05 +01:00
resolved-dnstls.h
tree-wide: Load libcrypto and libssl via dlopen()
2026-04-24 06:32:42 +02:00
resolved-etc-hosts.c
resolved: move resetting of {etc_hosts|static_records}_last to manager_dispatch_reload_signal()
2026-03-25 23:06:03 +01:00
resolved-etc-hosts.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-forward.h
resolved: add hook api
2025-11-15 07:44:24 +01:00
resolved-gperf.gperf
resolved: add configurable DNS cache size
2026-05-18 11:45:03 +01:00
resolved-hook.c
tree-wide: fix some double word errors like "the the"
2026-07-19 22:34:05 +01:00
resolved-hook.h
resolved: add hook api
2025-11-15 07:44:24 +01:00
resolved-link-bus.c
resolved: allow full replacement of link domains
2026-09-09 10:08:20 +01:00
resolved-link-bus.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-link.c
resolved: make check-pointer-deref clean
2026-03-27 11:24:38 +01:00
resolved-link.h
resolve: limit the number NTAs to something sensible
2026-05-04 22:39:05 +02:00
resolved-llmnr.c
resolved: move DNS RR/key/answer/question/packet tools to shared/
2025-10-20 10:35:23 +02:00
resolved-llmnr.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-manager.c
resolve: get the current DNS server before passing the server lists
2026-10-17 12:01:01 +01:00
resolved-manager.h
resolved: add configurable DNS cache size
2026-05-18 11:45:03 +01:00
resolved-mdns.c
Revert "resolve: refuse traffic from the local host only for queries"
2026-04-23 12:22:23 +02:00
resolved-mdns.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-resolv-conf.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
resolved-resolv-conf.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
resolved-socket-graveyard.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
resolved-socket-graveyard.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved-static-records.c
tree-wide: make use of sd_json_parse_fd() where appropriate
2026-05-18 10:39:04 +01:00
resolved-static-records.h
resolved: add ability to define additional local RRs via drop-ins
2026-03-24 21:24:48 +01:00
resolved-timeouts.h
resolve: Refactor mDNS transaction max attempts
2025-07-14 14:50:03 +05:30
resolved-util.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
resolved-util.h
resolve: only write one ELF note for libcrypto
2026-06-04 18:33:19 +01:00
resolved-varlink.c
resolve: detach DnsServiceBrowser object from Manager when freed or disconnected
2026-10-17 12:00:59 +01:00
resolved-varlink.h
resolve: Clean up includes
2025-05-21 23:50:31 +09:00
resolved.c
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
resolved.conf.in
resolve: use correct hostname for Cloudflare DNS-over-TLS
2026-06-09 09:19:14 +02:00
RFCs
…
test-dns-answer.c
dns-answer: preserve shared aliases when removing records
2026-07-19 22:34:06 +01:00
test-dns-browse-services.c
resolved: match browsed mDNS services by ifindex
2026-09-09 10:08:20 +01:00
test-dns-cache.c
resolved: only clamp cache TTLs when actually serving stale data
2026-09-09 10:08:21 +01:00
test-dns-packet-append.c
dns-packet: only set mDNS cache-flush bit on mDNS packets
2026-10-17 12:01:01 +01:00
test-dns-packet-extract.c
dns-packet: limit the number of jumps during packet decompression
2026-10-17 12:00:59 +01:00
test-dns-packet.c
resolved: move DNS RR/key/answer/question/packet tools to shared/
2025-10-20 10:35:23 +02:00
test-dns-query.c
resolved: preserve unchanged question on asymmetric redirect
2026-07-19 22:34:06 +01:00
test-dns-question.c
idn: drop support for libidn
2026-01-05 21:29:52 +09:00
test-dns-rr.c
dns-rr: invalidate wire format after changing ttl
2026-07-19 22:34:05 +01:00
test-dns-scope.c
resolved: don't send conflict advisories on mDNS scopes
2026-11-05 14:30:22 +00:00
test-dns-search-domain.c
test-dns-search-domain: several cleanups
2025-07-03 08:46:26 +09:00
test-dns-server.c
resolved: only restart the feature grace period on feature level changes
2026-11-05 13:58:21 +00:00
test-dns-stub.c
resolved: truncate bypass replies at RR boundaries
2026-11-05 14:30:22 +00:00
test-dns-synthesize.c
resolved: return NXDOMAIN for .onion domains
2026-11-05 14:48:09 +00:00
test-dns-transaction.c
resolved: don't validate replies to queries that were sent without DO
2026-11-05 13:58:21 +00:00
test-dns-zone.c
resolved: make check-pointer-deref clean
2026-03-27 11:24:38 +01:00
test-dnssec-complex.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
test-dnssec.c
resolve: validate short RSA DNSKEY blobs
2026-05-28 15:00:51 +09:00
test-resolve-tables.c
resolved: move DNS RR/key/answer/question/packet tools to shared/
2025-10-20 10:35:23 +02:00
test-resolved-dummy-server.c
tree-wide: Small fixes for various clang-tidy warnings
2025-11-26 16:22:00 +09:00
test-resolved-etc-hosts.c
tree-wide: use _contains() rather than _get()/_find()
2026-03-02 23:10:22 +09:00
test-resolved-link.c
resolved: move DNS RR/key/answer/question/packet tools to shared/
2025-10-20 10:35:23 +02:00
test-resolved-manager.c
resolved: don't disable the listening socket when a datagram is dropped
2026-09-09 10:08:21 +01:00
test-resolved-packet.c
test-resolved-packet: use assert_se() for the string comparison
2026-10-17 12:01:01 +01:00
test-resolved-stream.c
test-resolved-stream: Use accept4() instead of accept()
2026-03-20 22:05:08 +01:00