summaryrefslogtreecommitdiffstats
path: root/fish/guestfish.pod
diff options
context:
space:
mode:
authorRichard Jones <rjones@redhat.com>2010-07-21 12:52:51 +0100
committerRichard Jones <rjones@redhat.com>2010-07-21 19:49:22 +0100
commit581a7965faa5bf242ab3f8b7c259ab17c2e967f4 (patch)
tree664c440b9f48e1d4d1a913e23a2a96a9da8a0d48 /fish/guestfish.pod
parent2e7da2a2f3bbc6d6db148d7dc2ce238bf56f34db (diff)
downloadlibguestfs-581a7965faa5bf242ab3f8b7c259ab17c2e967f4.tar.gz
libguestfs-581a7965faa5bf242ab3f8b7c259ab17c2e967f4.tar.xz
libguestfs-581a7965faa5bf242ab3f8b7c259ab17c2e967f4.zip
generator: Add 'Key' parameter type.
Add a 'Key' parameter type, used for passing sensitive key material into libguestfs. Eventually the plan is to mlock() key material into memory. However this is very difficult to achieve because the encoded XDR strings end up in many places. Therefore users should note that key material passed to libguestfs might end up in swap. The only difference between 'Key' and 'String' currently is that guestfish requests the key from /dev/tty with echoing turned off.
Diffstat (limited to 'fish/guestfish.pod')
-rw-r--r--fish/guestfish.pod5
1 files changed, 5 insertions, 0 deletions
diff --git a/fish/guestfish.pod b/fish/guestfish.pod
index 5737c464..86dcf58c 100644
--- a/fish/guestfish.pod
+++ b/fish/guestfish.pod
@@ -179,6 +179,11 @@ I<--ro> might not behave correctly.
See also: L<virt-inspector(1)>.
+=item B<--keys-from-stdin>
+
+Read key or passphrase parameters from stdin. The default is
+to try to read passphrases from the user by opening C</dev/tty>.
+
=item B<--listen>
Fork into the background and listen for remote commands. See section