apply chroot to auth-zone zonefile in unbound-checkconf
@@ -433,6 +433,7 @@ check_modules_exist(const char* module_conf)
static void
morechecks(struct config_file* cfg)
{
+ struct config_auth* auth;
warn_hosts("stub-host", cfg->stubs);
warn_hosts("forward-host", cfg->forwards);
interfacechecks(cfg);
@@ -498,6 +499,12 @@ morechecks(struct config_file* cfg)
cfg->trusted_keys_file_list, cfg->chrootdir, cfg);
check_chroot_string("dlv-anchor-file", &cfg->dlv_anchor_file,
cfg->chrootdir, cfg);
+ for(auth = cfg->auths; auth; auth = auth->next) {
+ char* az = (auth->isrpz) ? "rpz zonefile" :
+ "auth-zone zonefile";
+ check_chroot_string(az, &auth->zonefile,
+ cfg->chrootdir, cfg);
+ }
#ifdef USE_IPSECMOD
if(cfg->ipsecmod_enabled && strstr(cfg->module_conf, "ipsecmod")) {
/* only check hook if enabled */
