A System and Service Manager
Go to file
Zbigniew Jędrzejewski-Szmek 14b2fafb36 resolve: remove the fallback dns server list
DNS questions (which necessarilly include IP addresses) are personally
indentifying information in the sense of GDPR
(https://gdpr.eu/eu-gdpr-personal-data/ explicitly lists IP address as
PII). Sending those packets to Google or Cloudflare is "forwarding"
this PII to them. GDPR says that information which is not enough to
identify individuals still needs to be protected because it may be
combined with other information or processed with improved technology
later. So even though the information in DNS alone it not very big, it
may be interpreted as protected information in various scenarios.

When Fedora is installed by an end-user, they must have the reasonable
expectation that Fedora will contant Fedora servers for updates and
status checks and such. But the case of DNS packets is different,
because the dns servers are not under our control. While most of the
time the information leak through DNS is negligible, we can't rule out
scenarios where it could be considered more important.

Another thing to consider is that ISP and other local internet access
mechanisms are probably worse overall for privacy compared to google and
cloudflare dns servers. Nevertheless, they are more obvious to users and
fit better in the regulatory framework, because there are local laws
that govern them and implicitic or explicit agreements for their use.
Whereas US-based servers are foreign and are covered by different rules.

The fallback DNS servers don't matter most of the time because
NetworkManager will include the servers from a DHCP lease. So
hopefully users will not see any effect from the change done in this
patch. Right now I think it is better to avoid the legal and privacy
risk. If it turns out this change causes noticable problems, we might
want to reconsider. In particular we could use the fallback servers
only in containers and such which are not "personal" machines and there
is no particular person attached to them.

https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/3C4KESHIMZDB6XCFO4EOBEDV4Q2AVVQ5/

I think we could provide a default dns server list more reasonably if
there was some kind of privacy policy published by Fedora and users
could at least learn about those defaults. Sadly, we don't have any
relevant privacy policy (https://pagure.io/Fedora-Council/tickets/issue/53).
2020-10-06 14:09:53 +02:00
tests Improve tests structure 2020-08-27 08:13:25 +02:00
.gitignore gitignore: add emacs backup files 2020-04-11 10:38:12 +02:00
20-grubby.install Two patches 2018-03-08 01:04:39 +01:00
20-yama-ptrace.conf Add example file with yama config 2015-07-05 22:52:35 -04:00
0001-Do-not-assert-in-test_add_acls_for_user.patch Add patch to ingnore test failure on s390x 2020-08-08 09:27:46 +02:00
0001-Document-some-reasonable-DNS-servers-in-the-example-.patch resolve: remove the fallback dns server list 2020-10-06 14:09:53 +02:00
0001-Revert-test-path-increase-timeout.patch Rework patches for test-path 2020-09-14 10:03:26 +02:00
0001-test-acl-util-output-more-debug-info.patch Add patch to debug test failure on s390x 2020-08-07 18:56:37 +02:00
0002-test-path-more-debugging-information.patch Rework patches for test-path 2020-09-14 10:03:26 +02:00
0003-test-path-do-not-fail-the-test-if-we-fail-to-start-s.patch Rework patches for test-path 2020-09-14 10:03:26 +02:00
0004-test-path-use-Type-exec.patch Rework patches for test-path 2020-09-14 10:03:26 +02:00
f58b96d3e8d1cb0dd3666bc74fa673918b586612.patch Add patch for kernel bug 2020-09-20 13:11:35 +02:00
inittab Add /etc/inittab and /etc/crypttab 2014-10-07 15:51:56 -04:00
libsystemd-shared.abignore Add abignore file to make abigail happy 2020-04-11 10:37:42 +02:00
macros.sysusers Add the sysusers compat parts 2020-02-10 17:19:18 +01:00
purge-nobody-user Add purge-nobody-user 2018-02-21 15:23:30 +01:00
sources Version 246.6 2020-09-20 13:10:31 +02:00
split-files.py split-files: break out more files into networkd subpackage 2020-10-01 09:14:06 +02:00
sysctl.conf.README Steal sysctl.conf from initscripts 2014-10-07 15:51:56 -04:00
systemd-journal-gatewayd.xml Add firewalld port descriptions 2015-01-05 22:46:35 -05:00
systemd-journal-remote.xml Add firewalld port descriptions 2015-01-05 22:46:35 -05:00
systemd-udev-trigger-no-reload.conf Prevent systemd-udev-trigger.service from restarting 2016-10-07 07:55:56 -04:00
systemd-user Override systemd-user PAM config in %install and not %prep 2018-07-15 01:08:07 -07:00
systemd.rpmlintrc Add abignore file to make abigail happy 2020-04-11 10:37:42 +02:00
systemd.spec resolve: remove the fallback dns server list 2020-10-06 14:09:53 +02:00
sysusers.attr Add the sysusers compat parts 2020-02-10 17:19:18 +01:00
sysusers.generate-pre.sh sysusers.generate-pre.sh: Fix parsing files that don't end with newline 2020-05-11 12:52:13 +02:00
sysusers.prov Add the sysusers compat parts 2020-02-10 17:19:18 +01:00
triggers.systemd Make scriptlets non-failing and skip udevadm reload if no udev 2019-04-11 16:04:25 +02:00
use-bfq-scheduler.patch Update to 246-rc1 2020-07-09 08:56:03 +02:00
yum-protect-systemd.conf Also protect systemd-udev from removal 2016-03-15 15:34:52 -04:00