From: Luca Boccassi <bluca@debian.org>
Date: Fri, 14 Jul 2023 22:45:00 +0000 (+0100)
Subject: Update NEWS with latest changes
X-Git-Tag: v254-rc2~1^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F28405%2Fhead;p=thirdparty%2Fsystemd.git

Update NEWS with latest changes
---

diff --git a/NEWS b/NEWS
index 46eb343f472..21bd87d422c 100644
--- a/NEWS
+++ b/NEWS
@@ -238,6 +238,11 @@ CHANGES WITH 254 in spe:
           and will also set a SYSTEMD_CONFIDENTIAL_VIRTUALIZATION= environment
           variable for unit generators. Finally, udev rules can match on a new
           'cvm' key that will be set when in a confidential VM.
+          Additionally, when running in a 'Confidential Virtual Machine', SMBIOS
+          strings and QEMU's fw_cfg protocol will not be used to import
+          credentials and kernel command line parameters by the system manager,
+          systemd-boot and systemd-stub, because the hypervisor is considered
+          untrusted in this particular setting.
 
         Journal: