about summary refs log tree commit diff
path: root/nixos/doc/manual/release-notes
diff options
context:
space:
mode:
authorFlorian Klink <flokli@flokli.de>2019-10-21 02:33:28 +0200
committerGitHub <noreply@github.com>2019-10-21 02:33:28 +0200
commitf24b4fb4110f8ef68e2e7c061e815b407edab2e2 (patch)
treeda5a6c8424a9164e6aaafa4545e8215a5bfe9a8e /nixos/doc/manual/release-notes
parent803aa128b1e83d89f8fcb23e8d4a3745384ac55d (diff)
parentca6c91e395763b3083b2cca40f733e66696d2506 (diff)
downloadnixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar
nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.gz
nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.bz2
nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.lz
nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.xz
nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.tar.zst
nixlib-f24b4fb4110f8ef68e2e7c061e815b407edab2e2.zip
nixos/networkmanager: remove networking.networkmanager.dynamic… (#71337)
nixos/networkmanager: remove networking.networkmanager.dynamicHosts
Diffstat (limited to 'nixos/doc/manual/release-notes')
-rw-r--r--nixos/doc/manual/release-notes/rl-2003.xml14
1 files changed, 13 insertions, 1 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2003.xml b/nixos/doc/manual/release-notes/rl-2003.xml
index ab0951e831ce..33eba8002bab 100644
--- a/nixos/doc/manual/release-notes/rl-2003.xml
+++ b/nixos/doc/manual/release-notes/rl-2003.xml
@@ -85,7 +85,19 @@
 
   <itemizedlist>
    <listitem>
-    <para />
+    <para>
+     The <literal>dynamicHosts</literal> option has been removed from the
+     <link linkend="opt-networking.networkmanager.enable">networkd</link>
+     module. Allowing (multiple) regular users to override host entries
+     affecting the whole system opens up a huge attack vector.
+     There seem to be very rare cases where this might be useful.
+     Consider setting system-wide host entries using
+     <link linkend="opt-networking.hosts">networking.hosts</link>, provide
+     them via the DNS server in your network, or use
+     <link linkend="opt-environment.etc">environment.etc</link>
+     to add a file into <literal>/etc/NetworkManager/dnsmasq.d</literal>
+     reconfiguring <literal>hostsdir</literal>.
+    </para>
    </listitem>
   </itemizedlist>
  </section>