diff --git a/tools/catalyst-auto b/tools/catalyst-auto
index 0cd9275f..27ba3700 100755
--- a/tools/catalyst-auto
+++ b/tools/catalyst-auto
@@ -244,7 +244,7 @@ verify_dnssec() {
 		exit 1
 	fi
 
-	if ! grep -q '^options \<edns0\>' /etc/resolv.conf; then
+	if ! grep -q '^options\>.*\<edns0\>' /etc/resolv.conf; then
 		echo "DNSSEC is not enabled in /etc/resolv.conf"
 		exit 1
 	fi