From: Mark Andrews <marka@isc.org>
Date: Wed, 2 Jun 2021 22:48:14 +0000 (+1000)
Subject: Release note [GL #481]
X-Git-Tag: v9.17.20~45^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=19819a1f026ce11e57829da1c64f6c68544931cf;p=thirdparty%2Fbind9.git

Release note [GL #481]
---

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 9ad60d58090..5e82f9c4b00 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,6 +40,11 @@ New Features
   gradually instead all-at-once to be able to grow the memory usage gradually
   while keeping steady response rate during the rehashing. :gl:`#2941`
 
+- Add finer-grained ``update-policy`` rule types, ``krb5-subdomain-self-rhs``
+  and ``ms-subdomain-self-rhs``, that restrict updates to SRV and PTR records
+  so that their content can only match the machine name embedded in the
+  Kerberos principal making the change. :gl:`#481`
+
 Removed Features
 ~~~~~~~~~~~~~~~~