about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorNikolay Amiantov <ab@fmap.me>2016-09-17 13:24:25 +0300
committerNikolay Amiantov <ab@fmap.me>2016-09-17 13:26:03 +0300
commitbf5d2bc215357040d29fec8f4b77cf8922dd208f (patch)
treed733867dc2e9568cbfd5c4cdb5cdb525dcd55488 /nixos
parent96c436612d924564165260e54ac1a7ecf95391e4 (diff)
downloadnixlib-bf5d2bc215357040d29fec8f4b77cf8922dd208f.tar
nixlib-bf5d2bc215357040d29fec8f4b77cf8922dd208f.tar.gz
nixlib-bf5d2bc215357040d29fec8f4b77cf8922dd208f.tar.bz2
nixlib-bf5d2bc215357040d29fec8f4b77cf8922dd208f.tar.lz
nixlib-bf5d2bc215357040d29fec8f4b77cf8922dd208f.tar.xz
nixlib-bf5d2bc215357040d29fec8f4b77cf8922dd208f.tar.zst
nixlib-bf5d2bc215357040d29fec8f4b77cf8922dd208f.zip
16.09 changelog: add mention of special filesystems changes
Diffstat (limited to 'nixos')
-rw-r--r--nixos/doc/manual/release-notes/rl-1609.xml8
1 files changed, 8 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-1609.xml b/nixos/doc/manual/release-notes/rl-1609.xml
index c267e5a42994..afa61a2ebbd6 100644
--- a/nixos/doc/manual/release-notes/rl-1609.xml
+++ b/nixos/doc/manual/release-notes/rl-1609.xml
@@ -121,6 +121,14 @@ following incompatible changes:</para>
   functionality.  See <xref linkend="sec-grsecurity" /> for documentation
   </para></listitem>
 
+  <listitem><para>Special filesystems, like <literal>/proc</literal>,
+  <literal>/run</literal> and others, now have the same mount options as
+  recommended by systemd. They are now unified across different places in NixOS.
+  Options are also updated on the system switch if possible. One benefit from
+  this is improved security -- most such filesystems are now mounted with
+  <literal>noexec</literal>, <literal>nodev</literal> and/or
+  <literal>nosuid</literal> options.</para></listitem>
+
 </itemizedlist>