diff --git a/NEWS b/NEWS index 15de4ce6cf..08a1ae4d2b 100644 --- a/NEWS +++ b/NEWS @@ -110,6 +110,16 @@ CHANGES WITH 260 in spe: Changes in udev: + * Permissions for /dev/ptp* are now set to 0664 (previously 0660), + allowing unprivileged read-only access. This relies on the kernel fix + "ptp: Add PHC file mode checks. Allow RO adjtime() without + FMODE_WRITE." (commit b4e53b15c04e3852949003752f48f7a14ae39e86 in + v6.15, backported to LTS releases in v6.12.68, v6.6.122, v6.1.162, + v5.15.199, and v5.10.249), which adds missing PTP ioctl permission + checks and keeps clock-modifying operations write-restricted. Systems + running stable kernel branches should ensure they are updated to patch + levels that include the fix. + * Persistent network interface naming has bee extended to MCTP devices with the "mc" prefix. @@ -161,16 +171,6 @@ CHANGES WITH 260 in spe: * resolvectl now uses varlink to connect to systemd-resolved. - systemd-udevd: - - * Permissions for /dev/ptp* are now set to 0664 (previously 0660), - allowing unprivileged read-only access. This relies on the kernel fix - "ptp: Add PHC file mode checks. Allow RO adjtime() without - FMODE_WRITE." (commit b4e53b15c04e), which adds missing PTP ioctl - permission checks and keeps clock-modifying operations - write-restricted. Systems running stable kernel branches should - ensure they are updated to patch levels that include this fix. - Changes in other components: * systemd-repart gained basic support for integrity checks of encrypted