----- "Daniel P. Berrange" <berra...@redhat.com> wrote:
> As per other mails, I don't think its neccessary to drop the secrets
> from volumes here. At least not until we introduce keystores as an
> explicit public API
As per other mails, it is necessary not to tell the secrets to clients. Given
that, libvirt does not need the secrets for anything, so it should not keep
them in memory in case a bug allowed an attacker to read the memory.
Mirek
--
Libvir-list mailing list
Libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list
