[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] [PATCH 4/9] Add support for encrypted (qcow) volume creation.



----- "Daniel P. Berrange" <berrange redhat com> wrote:
> As per other mails, I don't think its neccessary to drop the secrets
> from volumes here. At least not until we introduce keystores as an
> explicit public API
As per other mails, it is necessary not to tell the secrets to clients.  Given that, libvirt does not need the secrets for anything, so it should not keep them in memory in case a bug allowed an attacker to read the memory.
    Mirek


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]