systemd/tmpfiles: change directory owner to root

See merge request !972

Change the owner of kresd files to root:knot-resolver. This improves
behaviour for Fedora, where kresd can run under root (e.g. in Docker).
Otherwise, running kresd as root on Fedora would fail because of dropped
capabilities and attempting to access /var/lib/knot-resolver, which was
owned by knot-resolver.

This change makes it possible for both root (user) and knot-resolver
(group) to have the same permissions on these directories despite
dropped capabilities.

cache: fix large answers from packet cache

See merge request !976

Vladimír Čunát authored 4 years ago and Petr Špaček committed 4 years ago

Atomic packets larger than both 4k and net.bufsize() could not
be fetched from cache; now that's fixed in a minimalistic way.
(Minimalistic except for nitpicks like adding comments.)

Fixes #562 (kind-of)

Otherwise people could get confusing errors like:
> attempt to index field 'bg_worker' (a nil value)

distro/rpm: make spec centos8 compatible

See merge request !973

policy postrules

Closes #556

See merge request !969

Some rules need it and it was nil until now.

DENY, DENY_MSG, DROP, REFUSE and TC will now clear the _selected RRs.
I believe that's what people usually expect of these actions anyway.

modules/meson.build: move test definitions closer to modules

See merge request !971

Closes #553.

Previously, all those actions caused resolver to return SERVFAIL,
because the lua code failed to evaluate.

Notably, deny action now properly returns NXDOMAIN instead of SERVFAIL.
The drop action still returns SERVFAIL.

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

Old favicon used Knot DNS colors (dark blue) instead of Knot Resolver
colors (light blue).

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

Omission in a339ee10.

Related: #529

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

Rule ID is a number, not a string.

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

consensus() function is affected by
https://gitlab.labs.nic.cz/knot/knot-resolver/issues/554
so this fix helps only with single-instance scenarios.