Re: [PATCH] dnsmasq DBUS integration

[Paul Smith <paul mad-scientist net>]

On Thu, 2012-04-19 at 12:43 -0700, Howard Chu wrote:
> Just telling every connection to write 127.0.0.1 into /etc/resolv.conf
> doesn't solve that need. I don't want anyone writing anything into the
> file at all.

Although I don't claim it's the perfect solution, in order to deal with
proprietary VPN software that can't be configured to avoid
/etc/resolv.conf I've taken to using chattr to make it immutable:

    chattr +i /etc/resolv.conf

(assuming your filesystem type supports chattr) that may help with NM as
well; you may get errors in your logs but NM will still bring up the
interface.

There's also the ability in NM to set the "Method" field to "Automatic
(DHCP) addresses only" which won't try to obtain DNS server details from
the DHCP server and won't overwrite /etc/resolv.conf.  Unfortunately you
have to configure this separately on each new interface so it's not
ideal for wireless roaming.