From nobody Tue Apr 30 11:22:12 2024 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) client-ip=170.10.129.124; envelope-from=libvir-list-bounces@redhat.com; helo=us-smtp-delivery-124.mimecast.com; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1636117458; cv=none; d=zohomail.com; s=zohoarc; b=NvNU1fbHEBxP9YwEntptN485CXTdcbaQGIutTqI/5ReuhlbbFK+MCr9v5agSwpdSUmaIezZzgiIe1E/6gXS8yA9kRByWWZP69iYh3rEFlUewL9mmzR2RFR5lvsDpixpw0ypyQ1nMKLPbwIoMvDOWRasoreIZhxJa3mbaqyKi3bQ= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1636117458; h=Content-Type:Content-Transfer-Encoding:Date:From:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:Sender:Subject:To; bh=6YLFc0uHslnULDV0P5qPcQsSO7TTTJ6PHkz1WJPFC6Y=; b=AmlW5RXLeu1ltHWORNBuLcOhkm1sek9gE5u43aQQDnnZocku/dv4tpr7v2uUGUioZJtAP73yL0cdmD9j+QZuH8/p9cPwnm6ydsQtQIuGSSJa/LYcZdX2dTtgk2PJ/OhRiM5oa8AJvqLMNjaCzftBcDwnwoE4+99IUpKSDm+b90g= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by mx.zohomail.com with SMTPS id 1636117458648283.6744512361238; Fri, 5 Nov 2021 06:04:18 -0700 (PDT) Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-147-5jOEHgBUOrKCOxu1SWfeIQ-1; Fri, 05 Nov 2021 09:03:11 -0400 Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.phx2.redhat.com [10.5.11.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 4796187952F; Fri, 5 Nov 2021 13:03:04 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.21]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 863135D9DE; Fri, 5 Nov 2021 13:03:02 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id CB0014EA29; Fri, 5 Nov 2021 13:03:00 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 1A5D2w4t015236 for ; Fri, 5 Nov 2021 09:02:58 -0400 Received: by smtp.corp.redhat.com (Postfix) id 91C8060C17; Fri, 5 Nov 2021 13:02:58 +0000 (UTC) Received: from hjs.redhat.com (unknown [10.43.2.85]) by smtp.corp.redhat.com (Postfix) with ESMTP id 16A6D60C81 for ; Fri, 5 Nov 2021 13:02:54 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1636117395; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=6YLFc0uHslnULDV0P5qPcQsSO7TTTJ6PHkz1WJPFC6Y=; b=JmL6BbD5TMv3+Fp8OTV7DN4jW0ItVNaHgomTHDPNblX19lNHQYhgYZkkYSIjWI+vCeTpOL bbHJM0A5njp2yLes8AkyUp/GmOS6JxDnDh6cP8uKCP8Nx/ZnBkeOL/pN2Rf8NClHRFyEIw Rs+6HtUdBRaHfXoau9moGrUH8J3otqs= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1636117457; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=6YLFc0uHslnULDV0P5qPcQsSO7TTTJ6PHkz1WJPFC6Y=; b=EEoqgqHPJGaaG/U5Wnk426G9LVpEsVKChdbfySLjs3zLTGTI1mFKoe3Ny7mDHK9IeF/TNW o4lYC3RClh/wukS1xmTloQUZYV39dtauhggTYL0wApQtehK6/qTDFhnBApMiz0MWDWT5bt 8e2yWiqF8462RBDo9Dorr/Sbhyc8Pa8= X-MC-Unique: 5jOEHgBUOrKCOxu1SWfeIQ-1 From: =?UTF-8?q?J=C3=A1n=20Tomko?= To: libvir-list@redhat.com Subject: [libvirt PATCH] NEWS: document tcp_min_ssf Date: Fri, 5 Nov 2021 14:02:52 +0100 Message-Id: <6d14bc6c7aefa8d50d664909321480cee7122d6f.1636117369.git.jtomko@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.12 X-loop: libvir-list@redhat.com X-BeenThere: libvir-list@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Development discussions about the libvirt library & tools List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: libvir-list-bounces@redhat.com Errors-To: libvir-list-bounces@redhat.com X-Scanned-By: MIMEDefang 2.79 on 10.5.11.14 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=libvir-list-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-ZohoMail-DKIM: pass (identity @redhat.com) (identity @redhat.com) X-ZM-MESSAGEID: 1636117459725000001 Signed-off-by: J=C3=A1n Tomko Reviewed-by: Michal Privoznik --- NEWS.rst | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 983153a631..fc47c63bd2 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -24,6 +24,13 @@ v7.10.0 (unreleased) Libvirt is now able to report interface information from the guest's perspective (using guest agent). =20 + * Minimum SSF setting + + The libvirtd.conf option tcp_min_ssf can be used to override the minim= um + permitted security strength factor for non-TLS remote connections. + The current hardcoded minimum is 56 (single-DES) and will be raised to= 112 + in the future. Setting a minimum lower than 112 is not supported. + * **Bug fixes** =20 =20 --=20 2.31.1