rfc9094v3.txt | rfc9094.txt | |||
---|---|---|---|---|
skipping to change at line 2767 ¶ | skipping to change at line 2767 ¶ | |||
model [RFC8341] provides the means to restrict access for particular | model [RFC8341] provides the means to restrict access for particular | |||
NETCONF or RESTCONF users to a preconfigured subset of all available | NETCONF or RESTCONF users to a preconfigured subset of all available | |||
NETCONF or RESTCONF protocol operations and content. | NETCONF or RESTCONF protocol operations and content. | |||
There are a number of data nodes defined in this YANG module that are | There are a number of data nodes defined in this YANG module that are | |||
writable/creatable/deletable (i.e., config true, which is the | writable/creatable/deletable (i.e., config true, which is the | |||
default). These data nodes may be considered sensitive or vulnerable | default). These data nodes may be considered sensitive or vulnerable | |||
in some network environments. Write operations (e.g., edit-config) | in some network environments. Write operations (e.g., edit-config) | |||
to these data nodes without proper protection can have a negative | to these data nodes without proper protection can have a negative | |||
effect on network operations. Considerations in Section 8 of | effect on network operations. Considerations in Section 8 of | |||
[RFC8795] are also applicable to their subtrees in the module defined | [RFC8795] are also applicable to the module defined in this document. | |||
in this document. | ||||
Some of the readable data nodes in this YANG module may be considered | Some of the readable data nodes in this YANG module may be considered | |||
sensitive or vulnerable in some network environments. It is thus | sensitive or vulnerable in some network environments. It is thus | |||
important to control read access (e.g., via get, get-config, or | important to control read access (e.g., via get, get-config, or | |||
notification) to these data nodes. Considerations in Section 8 of | notification) to these data nodes. Considerations in Section 8 of | |||
[RFC8795] are also applicable to their subtrees in the module defined | [RFC8795] are also applicable to the module defined in this document. | |||
in this document. | ||||
Finally, the YANG module described in this document augments the | Finally, the YANG module described in this document augments the | |||
"ietf-network" YANG module [RFC8345] and the "ietf-te-topology" YANG | "ietf-network" YANG module [RFC8345] and the "ietf-te-topology" YANG | |||
module [RFC8795] by adding data nodes. The security considerations | module [RFC8795] by adding data nodes. The security considerations | |||
for the subtrees described in those RFCs apply equally to the new | for the subtrees described in those RFCs apply equally to the new | |||
data nodes that this module adds. | data nodes that this module adds. | |||
5. IANA Considerations | 5. IANA Considerations | |||
IANA has assigned new URIs from the "IETF XML Registry" [RFC3688] as | IANA has assigned new URIs from the "IETF XML Registry" [RFC3688] as | |||
End of changes. 2 change blocks. | ||||
4 lines changed or deleted | 2 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |