nixos/avahi: Warn when susceptible to CVE-2024-52615

2026-10-04 14:00:04 +00:00 · 2026-04-07 18:08:08 -04:00
parent 8074d48944
commit f715bbf5a4
1 changed files with 4 additions and 0 deletions
--- a/nixos/modules/services/networking/avahi-daemon.nix
+++ b/nixos/modules/services/networking/avahi-daemon.nix
@@ -283,6 +283,10 @@ in
  };

  config = lib.mkIf cfg.enable {
+    warnings = [
+      (lib.mkIf cfg.wideArea "Enabling `services.avahi.wideArea` exposes this system to `CVE-2024-52615`.")
+    ];
+
    users.users.avahi = {
      description = "avahi-daemon privilege separation user";
      home = "/var/empty";