<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 02 Feb 2016, at 10:40, Yaniv Dary <<a href="mailto:ydary@redhat.com" class="">ydary@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">I don't think we have a option like this. Michal?</div><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="gmail_signature"><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><pre cols="72" class=""><span style="font-family:arial,helvetica,sans-serif" class="">Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109
Tel : +972 (9) 7692306
8272306
Email: <a href="mailto:ydary@redhat.com" target="_blank" class="">ydary@redhat.com</a>
IRC : ydary</span></pre>
</div></div></div></div></div>
<br class=""><div class="gmail_quote">On Mon, Feb 1, 2016 at 5:16 AM, zhukaijie <span dir="ltr" class=""><<a href="mailto:kjzhu14@is.ac.cn" target="_blank" class="">kjzhu14@is.ac.cn</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello, now I have defined a custom property named 'A' in oVirt Engine. Administrator is responsible for entering the value (and arbitrary string ) of 'A' before starting the VM. After an users trys to start the VM in oVirt, VDSM will add the value of 'A' in the qemu:arg of libvirt domain xml, so that the value of 'A' will be added into the QEMU Cmd as a param. However, just like the password of VNC or SPICE, I want to hide the value of 'A' in '*' format in both Libvirt domain xml and QEMU Cmd, So could you please tell me how to achieve it? Thank you very much and happy 2016.<br class=""></blockquote></div></div></div></blockquote><div><br class=""></div>No, I don’t think you would be able to make libvirt and qemu to hide it. Unfortunately it would be exposed…for log files you are protected by file access permissions, but if there is anything sensitive on the command line and you have a user who can get a shell on that machine one can always see that in process listing</div><div><br class=""></div><div>do you perhaps need to pass some secret to a VM? Might be better via payload, it can be accessed in the guest as a file then.</div><div><br class=""></div><div>Thanks,</div><div>michal</div><div><br class=""><blockquote type="cite" class=""><div class=""><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
_______________________________________________<br class="">
Devel mailing list<br class="">
<a href="mailto:Devel@ovirt.org" class="">Devel@ovirt.org</a><br class="">
<a href="http://lists.ovirt.org/mailman/listinfo/devel" rel="noreferrer" target="_blank" class="">http://lists.ovirt.org/mailman/listinfo/devel</a><br class="">
</blockquote></div><br class=""></div>
</div></blockquote></div><br class=""></body></html>