[libvirt] [PATCH 4/9] Add support for encrypted (qcow) volume creation.

Miloslav Trmac mitr at redhat.com
Fri Jul 24 04:22:21 UTC 2009


----- "Daniel P. Berrange" <berrange at redhat.com> wrote:
> As per other mails, I don't think its neccessary to drop the secrets
> from volumes here. At least not until we introduce keystores as an
> explicit public API
As per other mails, it is necessary not to tell the secrets to clients.  Given that, libvirt does not need the secrets for anything, so it should not keep them in memory in case a bug allowed an attacker to read the memory.
    Mirek




More information about the libvir-list mailing list