NEWS: document tcp_min_ssf

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>

diff --git a/NEWS.rst b/NEWS.rst
index a71b84c36390a497dce8b3a8dc20016c105515f1..b63a0aa7211df6c9cbb3f4907e80801f0b03b800 100644 (file)
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -30,6 +30,13 @@ v7.10.0 (unreleased)
     Libvirt is now able to report interface information from the guest's
     perspective (using guest agent).
 
+  * Minimum SSF setting
+
+    The libvirtd.conf option tcp_min_ssf can be used to override the minimum
+    permitted security strength factor for non-TLS remote connections.
+    The current hardcoded minimum is 56 (single-DES) and will be raised to 112
+    in the future. Setting a minimum lower than 112 is not supported.
+
 * **Bug fixes**