Re: [PATCH 12/15] news: Introduce "migrate_tls_force" qemu.conf option
On Tue, Apr 13, 2021 at 15:08:42 +0800, Han Han wrote:
Signed-off-by: Han Han <hhan(a)redhat.com>
---
NEWS.rst | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst
index fed80b6724..6cf790bc25 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -335,6 +335,11 @@ v6.10.0 (2020-12-01)
option is missing are now '1'. This ensures that only legitimate clients
access servers, which don't have any additional form of authentication.
+ * conf: Introduce "migrate_tls_force" qemu.conf option
The we use 'conf' usually for VM configuration.
+
+ Add this administrative knob to force use the VIR_MIGRATE_TLS flag with
+ migration, in case of sensitive information leak.
I'd word it as:
The ``migrate_tls_force`` configuration option allows administrators to
always force migration connections to be TLS secured as if
``VIR_MIGRATE_TLS`` flag was used.
+
* **New features**
* qemu: Implement OpenSSH authorized key file management APIs
--
2.31.1