----- "Daniel P. Berrange" <berrange@xxxxxxxxxx> wrote:
> As per other mails, I don't think its neccessary to drop the secrets
> from volumes here. At least not until we introduce keystores as an
> explicit public API
As per other mails, it is necessary not to tell the secrets to clients. Given that, libvirt does not need the secrets for anything, so it should not keep them in memory in case a bug allowed an attacker to read the memory.
Mirek
--
Libvir-list mailing list
Libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list