Re: [ovirt-users] I wrote an oVirt thing

On Tue, Nov 29, 2016 at 3:40 AM, Konstantin Shalygin <k0ste(a)k0ste.ru&gt; wrote: Can you further explain the use case? I assume the user portal is not good enough for some reason? Hi, It somehow looks like a fork of the CLI (due to the added patch[1]). I'm not sure how happy I am about it, considering the patch is adding a feature with security issues (there is a reason we do not support password passed via the command line - it's somewhat less secure). Since you are already checking for the CLI rc file[2], just add the password to it and launch with it (in a temp file in the temp directory with the right permissions, etc...) BTW, note that the attempt to delete the password from memory[3] may or may not work. After all, it's a copy of what you got from entry.get_text() few lines before. And Python GC is not really to be relied upon to delete things ASAP anyway. There are some lovely discussions on the Internet about it. For example[4]. Y. [1] https://github.com/k0ste/ovirt-pygtk/blob/master/add_password_option.patch [2] https://github.com/k0ste/ovirt-pygtk/blob/master/ovirt-pygtk.py#L81 [3] https://github.com/k0ste/ovirt-pygtk/blob/master/ovirt-pygtk.py#L71 [4] http://stackoverflow.com/questions/728164/securely-erasing-password-in-me...