Re: [libvirt] [PATCH 4/9] Add support for encrypted (qcow) volume creation.
----- "Daniel P. Berrange" <berrange(a)redhat.com> wrote:
As per other mails, I don't think its neccessary to drop the
secrets
from volumes here. At least not until we introduce keystores as an
explicit public API
As per other mails, it is necessary not to tell the secrets to
clients. Given that, libvirt does not need the secrets for anything, so it should not
keep them in memory in case a bug allowed an attacker to read the memory.
Mirek