<div dir="ltr">I took a quick look<br><br>* <a href="https://github.com/isc-projects/bind9/blob/main/doc/misc/dnssec-policy.default.conf">https://github.com/isc-projects/bind9/blob/main/doc/misc/dnssec-policy.default.conf</a><br><div>* <a href="https://gitlab.isc.org/isc-projects/bind9/-/blob/main/doc/misc/dnssec-policy.default.conf">https://gitlab.isc.org/isc-projects/bind9/-/blob/main/doc/misc/dnssec-policy.default.conf</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jun 6, 2024 at 8:19 AM Michael Paoli via bind-users <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">dnssec-policy default - where/how to determine what all its settings are?<br>
Documentation<br>
doc/bind9-doc/arm/reference.html#dnssec-policy-default<br>
<a href="https://bind9.readthedocs.io/en/v9.18.27/reference.html#dnssec-policy-default" rel="noreferrer" target="_blank">https://bind9.readthedocs.io/en/v9.18.27/reference.html#dnssec-policy-default</a><br>
says:<br>
A verbose copy of this policy may be found in the source tree, in the<br>
file doc/misc/dnssec-policy.default.conf<br>
But I'm not finding that in source nor elsewhere.<br>
There doesn't even seem to be an rndc command that can list<br>
defined dnssec-policy sets that are in place, nor that<br>
can list how they're configured.  This information should be much more<br>
visible/findable, so ... where is it?  I'm sure it must be present<br>
somewhere in the source, but haven't easily located it by searching.<br>
Shouldn't be necessary to run debugging to track down where this is<br>
and where in the source it comes from.  So ... where does one find it?<br>
<br>
I've been looking at Debian BIND9 packages:<br>
bind9          1:9.18.24-1<br>
bind9-doc      1:9.18.24-1<br>
and also ISC BIND 9.18.24 source and 9.18.27 source and documentation.<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr">- Andrew "lathama" Latham -</div></div>