-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 29 Apr 2022 16:53:50 +0300 Source: unbound Architecture: source Version: 1.15.0-7 Distribution: unstable Urgency: medium Maintainer: unbound packagers <unbound@packages.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 641704 1003135 1009928 Changes: unbound (1.15.0-7) unstable; urgency=medium . * unbound-resolvconf.service: - do not (re)start it explicitly from the postinst script, it should only be started as a part of unbound.service. Closes: #1009928 - add comments to this service file to clarify its purpose - add lintian overrides for this service file * /etc/resolvconf/update.d/unbound resolvconf hook script: - ship it enabled for new installs. Closes: #1003135 - but do not re-enable it for previous installs - add more comments to this file clarifying its purpose and possible issues - add comments about various ways to enable/disable this hook, - implement ability to disable it by setting USE_RESOLVCONF_FORWARDS=false in /etc/default/unbound - multiple other small changes and cleanups - rename it in debian packaging from d/resolvconf to d/resolvconf-forwards to make it's purpose more explicit * use dns root.key stored in /usr/share/dns/ (as provided by dns-root-data package) instead of the unbound-owned /var/lib/unbound/root.key (which is managed by an untrusted user). This changes defaults for unbound-host and unbound-anchor. Add Recommends: dns-root-data for unbound-host so it can find this root.key in the default install. Closes: #641704 Checksums-Sha1: 24a1db6cad1d4c69890bd22a5c4c9412933b36c3 2774 unbound_1.15.0-7.dsc 074f796fc5a31697e62eff9d9b1a3f52ffb8decf 27484 unbound_1.15.0-7.debian.tar.xz a0e3fc642a836a3b81a9b6c163613160eba0f54b 7669 unbound_1.15.0-7_source.buildinfo Checksums-Sha256: ff7fee3b6d52d9ec5ccd1d23421601cff7fe9adbbb6b9463e3cb463f60c8c043 2774 unbound_1.15.0-7.dsc c990b153e946f5f4a160f76e5589e899d3b232d344bf7827079f75571b471c3e 27484 unbound_1.15.0-7.debian.tar.xz fad96eff9bd802f1391fa6c9a72e72fcfff06e2ce2256eb7aeb39f33deae200d 7669 unbound_1.15.0-7_source.buildinfo Files: c1a8519528ccbb0b0adc095ffb21611a 2774 net optional unbound_1.15.0-7.dsc cc6fa58e0555e4d0089ddd1903d683c4 27484 net optional unbound_1.15.0-7.debian.tar.xz 34205b60cf279fe9ad918843d7d93e03 7669 net optional unbound_1.15.0-7_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmJr8QIPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZdrQIAJTqRYYXyHHl1Gg+DiwBXoXDiKtbUScG1jV5 qA1EYuJcu0QUBsYbsns7d4z4Nd2n8ym0BKzkBRLemDX7sxES08RvN19RlB2rz9vM Hrq7FeF2fJuh38VRJizGb1ts87v0omLyEBrzWGaG0lLOG+Z13uQy6xKoW2cKexIm kkml6r+Wy56vaQRofS2gsVb/iz0Ggt2VgQ1wycFnLESKNWVkVxmy9D81vI6l/Ucv mygXHCaR9TQOrW4N+Gx6R/QbGnbUhisXQBWRWH/AupAq1ntKDaYWtZ7L0sRoy3oi orh6fuwBtTlG70g2K+ysoZ0Rgv6wdwbIzpXX20G0JRDazsZ3dok= =RGpo -----END PGP SIGNATURE-----