rfc9196v6.txt | rfc9196.txt | |||
---|---|---|---|---|
skipping to change at line 824 ¶ | skipping to change at line 824 ¶ | |||
and what protocols might be used for such notifications. Knowledge | and what protocols might be used for such notifications. Knowledge | |||
of this type of value might, for example, allow an attacker to gain | of this type of value might, for example, allow an attacker to gain | |||
insight into how long unauthorized configuration changes might be | insight into how long unauthorized configuration changes might be | |||
active prior to detection and what communications channels might be | active prior to detection and what communications channels might be | |||
disrupted to extend the period of non-detection. Documents adding | disrupted to extend the period of non-detection. Documents adding | |||
additional capabilities via augmenting this module are encouraged to | additional capabilities via augmenting this module are encouraged to | |||
document the security considerations of the new YANG nodes, according | document the security considerations of the new YANG nodes, according | |||
to the guidance in BCP 216 [RFC8407]. | to the guidance in BCP 216 [RFC8407]. | |||
All protocol-accessible data nodes in augmented modules are read-only | All protocol-accessible data nodes in augmented modules are read-only | |||
and cannot be modified. The data in these modules is not security | and cannot be modified. Access control may be configured to avoid | |||
sensitive. Access control may be configured to avoid exposing the | exposing any read-only data that is defined by the augmenting module | |||
read-only data. | documentation as being security sensitive. | |||
When that data is in file format, the data should be protected | When that data is in file format, the data should be protected | |||
against modification or unauthorized access using normal file- | against modification or unauthorized access using normal file- | |||
handling mechanisms. The data in file format also inherits all the | handling mechanisms. The data in file format also inherits all the | |||
security considerations of [RFC9195], which includes additional | security considerations of [RFC9195], which includes additional | |||
considerations about read protections and distinguishes between data | considerations about read protections and distinguishes between data | |||
at rest and in motion. | at rest and in motion. | |||
7. IANA Considerations | 7. IANA Considerations | |||
skipping to change at line 930 ¶ | skipping to change at line 930 ¶ | |||
[RFC8639] Voit, E., Clemm, A., Gonzalez Prieto, A., Nilsen-Nygaard, | [RFC8639] Voit, E., Clemm, A., Gonzalez Prieto, A., Nilsen-Nygaard, | |||
E., and A. Tripathy, "Subscription to YANG Notifications", | E., and A. Tripathy, "Subscription to YANG Notifications", | |||
RFC 8639, DOI 10.17487/RFC8639, September 2019, | RFC 8639, DOI 10.17487/RFC8639, September 2019, | |||
<https://www.rfc-editor.org/info/rfc8639>. | <https://www.rfc-editor.org/info/rfc8639>. | |||
[RFC8641] Clemm, A. and E. Voit, "Subscription to YANG Notifications | [RFC8641] Clemm, A. and E. Voit, "Subscription to YANG Notifications | |||
for Datastore Updates", RFC 8641, DOI 10.17487/RFC8641, | for Datastore Updates", RFC 8641, DOI 10.17487/RFC8641, | |||
September 2019, <https://www.rfc-editor.org/info/rfc8641>. | September 2019, <https://www.rfc-editor.org/info/rfc8641>. | |||
[RFC9195] Lengyel, B. and B. Claise, "A File Format for YANG | [RFC9195] Lengyel, B. and B. Claise, "A File Format for YANG | |||
Instance Data", RFC 9195, DOI 10.17487/RFC9195, January | Instance Data", RFC 9195, DOI 10.17487/RFC9195, February | |||
2022, <https://www.rfc-editor.org/info/rfc9195>. | 2022, <https://www.rfc-editor.org/info/rfc9195>. | |||
8.2. Informative References | 8.2. Informative References | |||
[RFC8340] Bjorklund, M. and L. Berger, Ed., "YANG Tree Diagrams", | [RFC8340] Bjorklund, M. and L. Berger, Ed., "YANG Tree Diagrams", | |||
BCP 215, RFC 8340, DOI 10.17487/RFC8340, March 2018, | BCP 215, RFC 8340, DOI 10.17487/RFC8340, March 2018, | |||
<https://www.rfc-editor.org/info/rfc8340>. | <https://www.rfc-editor.org/info/rfc8340>. | |||
[RFC8407] Bierman, A., "Guidelines for Authors and Reviewers of | [RFC8407] Bierman, A., "Guidelines for Authors and Reviewers of | |||
Documents Containing YANG Data Models", BCP 216, RFC 8407, | Documents Containing YANG Data Models", BCP 216, RFC 8407, | |||
End of changes. 2 change blocks. | ||||
4 lines changed or deleted | 4 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |