Hello, a program keeps overwriting my resolv.conf. For now I have resorted to a cron job that manually sets my resolve.conf to 127.0.0.1 every minute.
I properly set my DNS within Network-manager to 127.0.0.1 and that never changes, according to the GUI. Although after several minutes/hours I notice that my DNS begins pointing to an external address.
Whenever it gets overwritten it becomes:
"
domain lan
search lan
nameserver 10.0.0.1
"
I have been running auditd on resolv.conf and the only oddity I think I see is dhclient but I do not know enough to determine whether this is normal.
"type=CONFIG_CHANGE msg=audit(1574585306.801:972): auid=4294967295 ses=4294967295 op=updated_rules path="/etc/resolv.conf" key=(null) list=4 res=
1
type=PATH msg=audit(1574585306.801:973): item=2 name="/etc/resolv.conf.dhclient-new.28806" inode=12847486 dev=fe:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0"
I may be overlooking something stupid simple?