STAGE 1: NETWORK (UNTRUSTED) STAGE 2: RTSOLD (C PARSER) STAGE 3: RESOLVCONF (SHELL SCRIPT) RAW PACKET STRING SHELL ARGS UNQUOTED EXPANSION IPv6 RA (DNSSL) rtsold (parser) exec(resolvconf) resolvconf (shell) $() EVALUATION Label Length View (RFC 1035) | 63 bytes max per label | TRUST BREAK echo $domain_name