summaryrefslogtreecommitdiff
path: root/man
diff options
context:
space:
mode:
authorChristian Hesse <mail@eworm.de>2016-02-29 21:04:02 +0100
committerChristian Hesse <mail@eworm.de>2016-03-01 19:02:11 +0100
commita5a4e3658ddc0c9692057ce5288fa1bb6f53bacc (patch)
treeffd0eeaac43d8d383dc5ca509f838a9931a97ba8 /man
parent114761866a5e9376277daf847663d23361ffe0c0 (diff)
ask-password: add option --no-output to not print password to stdout
systemd-ask-password can store passwords in kernel keyring. However it uses to print the passwords to standard output nevertheless. Depending on where systemd-ask-password is called passwords may end on display or in log, leaking sensitive information. This allows to make systemd-ask-password quiet, effectively disabling printing passwords to standard output.
Diffstat (limited to 'man')
-rw-r--r--man/systemd-ask-password.xml9
1 files changed, 9 insertions, 0 deletions
diff --git a/man/systemd-ask-password.xml b/man/systemd-ask-password.xml
index 2a4d24349b..e84a15c554 100644
--- a/man/systemd-ask-password.xml
+++ b/man/systemd-ask-password.xml
@@ -192,6 +192,15 @@
This will output one password per line.</para></listitem>
</varlistentry>
+ <varlistentry>
+ <term><option>--no-output</option></term>
+
+ <listitem><para>Do not print passwords to standard output.
+ This is useful if you want to store a password in kernel
+ keyring with <option>--keyname</option> but do not want it
+ to show up on screen or in logs.</para></listitem>
+ </varlistentry>
+
<xi:include href="standard-options.xml" xpointer="help" />
</variablelist>