diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2018-02-02 16:22:47 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-02-02 16:22:47 +0100 |
| commit | 4a7e5fce6a315cdf2621227d30fc25962dcfcc32 (patch) | |
| tree | bdf489248514386355aae78bc6ad6d8a61188953 /man | |
| parent | d21b0c826f6c9ba365f6257becd260aa9d2d82ff (diff) | |
| parent | a8d6dbedca703e8f2ed26beb018eeac72a1b0fb1 (diff) | |
| download | systemd-4a7e5fce6a315cdf2621227d30fc25962dcfcc32.tar.gz | |
Merge pull request #8041 from zx2c4-forks/jd/doc-fixups
WireGuard documentation fixes
Diffstat (limited to 'man')
| -rw-r--r-- | man/systemd.netdev.xml | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/man/systemd.netdev.xml b/man/systemd.netdev.xml index eb86db9792..2f67d2f223 100644 --- a/man/systemd.netdev.xml +++ b/man/systemd.netdev.xml @@ -1025,7 +1025,10 @@ <para>The Base64 encoded private key for the interface. It can be generated using the <command>wg genkey</command> command (see <citerefentry project="wireguard"><refentrytitle>wg</refentrytitle><manvolnum>8</manvolnum></citerefentry>). - This option is mandatory to use wireguard.</para> + This option is mandatory to use WireGuard. + Note that because this information is secret, you may want to set + the permissions of the .netdev file to be owned by <literal>root:systemd-networkd</literal> + with a <literal>0640</literal> file mode.</para> </listitem> </varlistentry> <varlistentry> @@ -1040,7 +1043,7 @@ <varlistentry> <term><varname>FwMark=</varname></term> <listitem> - <para>Sets a firewall mark on outgoing wireguard packets from this interface.</para> + <para>Sets a firewall mark on outgoing WireGuard packets from this interface.</para> </listitem> </varlistentry> </variablelist> @@ -1070,7 +1073,10 @@ by the <command>wg genpsk</command> command. This option adds an additional layer of symmetric-key cryptography to be mixed into the already existing public-key cryptography, for post-quantum - resistance.</para> + resistance. + Note that because this information is secret, you may want to set + the permissions of the .netdev file to be owned by <literal>root:systemd-networkd</literal> + with a <literal>0640</literal> file mode.</para> </listitem> </varlistentry> <varlistentry> |