[secdir] Review of draft-ietf-netmod-schema-mount-10

[Shawn Emery <[e-mail]>]

Reviewer: Shawn M. Emery
Review result: Ready with nits

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security
area directors. Document editors and WG chairs should treat these
comments just like any other last call comments.

This draft specifies a schema for YANG module mount points for yet another
specified schema location.

The security considerations section does exist and refers to transport
security
through SSH and HTTPS for NETCONF and RESTCONF, respectively.  For
authorization, the spec refers to RFC 8341 for controlling NETCONF and
RESTCONF user access.  Data that would be considered sensitive or subject
to attack is briefly described and prescribes read access controls for said
data.
I agree with the authors' assertions.

General comments:

None.

Editorial comments:

OLD:

These are the subtrees and data nodes and their sensitivity/vulnerability:

NEW:

The following should be considered for subtrees/data nodes and their
corresponding

sensitivity/vulnerability:


Shawn.
--