default local DNS caching name server

Richard W.M. Jones rjones at
Sat Apr 12 15:40:50 UTC 2014

On Sat, Apr 12, 2014 at 11:01:20AM -0400, Paul Wouters wrote:
> On Sat, 12 Apr 2014, Chuck Anderson wrote:
> >Maybe we should set the file to be immutable after setting it to
> >
> >chattr +i /etc/resolv.conf
> That is the trick currently used by dnssec-triggerd to prevent other
> applications from messing with that file.

Oh crap, that means I'm going to need a "really really don't touch
this file" flag, perhaps a one-way flag that can never be un-set.

I'm already setting chattr +i /etc/resolv.conf to stop anything
touching the file, and I don't want apps to mess with that flag (or
the file).


Richard Jones, Virtualization Group, Red Hat
Read my programming and virtualization blog:
libguestfs lets you edit virtual machines.  Supports shell scripting,
bindings from many languages.

More information about the devel mailing list