Release of systemd 230
Zbigniew J. mongodrzejeski-Szmek announced that systemd has released version 230, a major update. The last version of systemd 229 was released about three months ago.
The main focus of this update is its DNS resolution service systemd-resolved. Now it can use DNSSEC to verify the resolution result. As you know, systemd's "Claw" has reached all the basic components except the kernel in GNU/Linux. For example, the DNS parser is an example, it is used to provide services for DNS resolution requests in the system.
In this update, when the "allow-downgrade" mode is used, the DNSSEC extension is enabled by default. DNSSEC is an extension used to verify the security of DNS resolution data. It plays an important role in preventing DNS fraud, but so far Many DNS servers have not yet supported it, you can also disable it by adding the "-- with-default-dnssec = no" Compilation parameter during compilation.
"We recommend that downstream maintenance personnel enable this feature during development and report the detected problems to the upstream," said Zbigniew J. mongodrzejeski-Szmek, "We really want to get feedback from the DNSSEC validator, regardless of the feedback. However, it should be noted that DNSSEC support may be disabled in stable versions of downstream releases because it may cause incompatibility with some DNS servers and networks ."
Of course, systemd-resolved is not the only component to be improved in the systemd initialization system, and many other components have changed.
Soon after systemd 230 will enter each Linux release that uses systemd as the default initialization system.
From: http://news.softpedia.com/news/systemd-230-launches-with-dnssec-ena...
Address: http://www.linuxprobe.com/systemd-230-release.html
Zbigniew J. mongodrzejeski-Szmek announced that systemd has released version 230, a major update. The last version of systemd 229 was released about three months ago.