4 ms·
We already use configuration management to do manage resolv.conf; any other method of modification is noncompliant. So don't run resolvd. Problem solve
by stonogo 6y ago
We already use configuration management to do manage
resolv.conf; any other method of modification is
noncompliant.
So don't run resolvd. Problem solved forever.
This exists as daemon because OpenBSD is in the process of rewriting certain parts of their code to have explicit privilege separation. They just committed another one to handle DHCP leases, for example.
- _jal 6y agoAnd I preemptively agreed with you: > cruft to strip out > rewriting certain parts of their code to have explicit privilege separation I was unaware that this was the goal. If it is, that's a better explanation for changing things than I've heard elsewhere. Still doesn't explain why it should be a daemon instead of a helper binary.
- stonogo 6y agoIt's a daemon so it can monitor the routing sockets for messages from dhcp/slaac/etc utilities that send updates. If it were a helper binary it would violate the privsep efforts.