diff options
author | Florian Klink <flokli@flokli.de> | 2019-10-21 02:33:28 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2019-10-21 02:33:28 +0200 |
commit | f24b4fb4110f8ef68e2e7c061e815b407edab2e2 (patch) | |
tree | da5a6c8424a9164e6aaafa4545e8215a5bfe9a8e /nixos/doc/manual/release-notes | |
parent | 803aa128b1e83d89f8fcb23e8d4a3745384ac55d (diff) | |
parent | ca6c91e395763b3083b2cca40f733e66696d2506 (diff) | |
download | nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.gz nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.bz2 nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.lz nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.xz nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.zst nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.zip |
nixos/networkmanager: remove networking.networkmanager.dynamic… (#71337)
nixos/networkmanager: remove networking.networkmanager.dynamicHosts
Diffstat (limited to 'nixos/doc/manual/release-notes')
-rw-r--r-- | nixos/doc/manual/release-notes/rl-2003.xml | 14 |
1 files changed, 13 insertions, 1 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2003.xml b/nixos/doc/manual/release-notes/rl-2003.xml index ab0951e831ce..33eba8002bab 100644 --- a/nixos/doc/manual/release-notes/rl-2003.xml +++ b/nixos/doc/manual/release-notes/rl-2003.xml @@ -85,7 +85,19 @@ <itemizedlist> <listitem> - <para /> + <para> + The <literal>dynamicHosts</literal> option has been removed from the + <link linkend="opt-networking.networkmanager.enable">networkd</link> + module. Allowing (multiple) regular users to override host entries + affecting the whole system opens up a huge attack vector. + There seem to be very rare cases where this might be useful. + Consider setting system-wide host entries using + <link linkend="opt-networking.hosts">networking.hosts</link>, provide + them via the DNS server in your network, or use + <link linkend="opt-environment.etc">environment.etc</link> + to add a file into <literal>/etc/NetworkManager/dnsmasq.d</literal> + reconfiguring <literal>hostsdir</literal>. + </para> </listitem> </itemizedlist> </section> |