K 10
svn:author
V 3
des
K 8
svn:date
V 27
2013-09-23T20:06:59.400103Z
K 7
svn:log
V 384
Prevent resolvconf from updating /etc/resolv.conf.  As Jakob Schlyter
pointed out, having additional nameservers listed in /etc/resolv.conf
can break DNSSEC verification by providing a false positive if unbound
returns SERVFAIL due to an invalid signature.  The downside is that
the domain / search path won't get updated either, but we can live
with that.

Approved by:	re (blanket)

END