Telechat Review of draft-ietf-netmod-system-config-18
review-ietf-netmod-system-config-18-secdir-telechat-rosomakho-2026-01-16-00

Request Review of draft-ietf-netmod-system-config
Requested revision No specific revision (document currently at 20)
Type Telechat Review
Team Security Area Directorate (secdir)
Deadline 2026-01-20
Requested 2026-01-08
Authors Qiufang Ma , Qin Wu , Chong Feng
I-D last updated 2026-01-30 (Latest revision 2026-01-28)
Completed reviews Yangdoctors IETF Last Call review of -06 by Michal Vaško (diff)
Yangdoctors IETF Last Call review of -16 by Michal Vaško (diff)
Opsdir IETF Last Call review of -16 by Luis M. Contreras (diff)
Genart IETF Last Call review of -16 by Ines Robles (diff)
Artart IETF Last Call review of -15 by Marc Blanchet (diff)
Secdir IETF Last Call review of -16 by Yaroslav Rosomakho (diff)
Secdir Telechat review of -18 by Yaroslav Rosomakho (diff)
Assignment Reviewer Yaroslav Rosomakho
State Completed
Request Telechat review on draft-ietf-netmod-system-config by Security Area Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/secdir/0y7rXu2r__CZ-XF1XtKaIXqvkwI
Reviewed revision 18 (document currently at 20)
Result Ready
Completed 2026-01-16
review-ietf-netmod-system-config-18-secdir-telechat-rosomakho-2026-01-16-00
I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG. These comments
were written primarily for the benefit of the security area directors. Document
editors and WG chairs should treat these comments just like any other last call
comments.

The authors have addressed the security issues raised in my earlier review, in
particular by strengthening the Security Considerations around access control
for sensitive system configuration and the risks of overriding/merging <system>
with <running>/<operational>, and by updating the references. I do not have any
additional security concerns at this point; the document appears ready from a
security review perspective.