diff --git a/nixos/modules/services/networking/avahi-daemon.nix b/nixos/modules/services/networking/avahi-daemon.nix index 55a90649ba43..b01b4b3b0eb8 100644 --- a/nixos/modules/services/networking/avahi-daemon.nix +++ b/nixos/modules/services/networking/avahi-daemon.nix @@ -283,6 +283,10 @@ in }; config = lib.mkIf cfg.enable { + warnings = [ + (lib.mkIf cfg.wideArea "Enabling `services.avahi.wideArea` exposes this system to `CVE-2024-52615`.") + ]; + users.users.avahi = { description = "avahi-daemon privilege separation user"; home = "/var/empty";