Subject: Re: per-process socket security settings
To: Darren Reed <darrenr@reed.wattle.id.au>
From: None <itojun@iijlab.net>
List: tech-net
Date: 03/08/2001 10:42:39 
>> 	you right.  i will need some trick to allow DNS lookups to go out
>> 	without ipsec...
>maybe libresolv could explicity check and reset it if it's not enabled
>via resolv.conf ?

	yup, but if there's someone who would like to use IPsec'ed DNS
	lookup...  an option to /etc/resolv.conf may be necessary.

itojun