README for unbound 1.*

REQUIREMENTS

PRE/POST-INSTALL

1. Create a user/group unbound with a unused id < 99 or run the
   provided pre-install script:

   'groupadd -g 41 unbound'
   'useradd -u 41 -g unbound -d /etc/unbound -s /bin/false unbound'
   'passwd -l unbound'

PRECAUTION

To enable DNSSEC validation all you have to do is to enable the 
"auto-trust-anchor-file" option in /etc/unbound/unbound.conifg.
The effective user unbound is running as (default: unbound) needs
write access to /var/lib/unbound to update the trust anchor for 
DNSSEC validation. Adjust the owner of that directory if you run 
unbound as a different user.