92cda29540
If the user has already modified configuration file unbound.conf, our change of defaults would not affect them. Let's move the change to extra file, which will be applied even when main config file were not modified. Correct new config snippet typo in CVE id ; Resolves: CVE-2024-1488 Resolves: RHEL-25500
10 lines
420 B
Plaintext
10 lines
420 B
Plaintext
# Remote control config section update.
|
|
# Previous defaults allowed any process to change settings, CVE-2024-1488
|
|
remote-control:
|
|
# set to an absolute path to use a unix local name pipe, certificates
|
|
# are not used for that, so key and cert files need not be present.
|
|
control-interface: "/run/unbound/control"
|
|
|
|
# For local sockets this option is ignored, and TLS is not used.
|
|
control-use-cert: "yes"
|