[elbe-devel] [PATCH v2 0/1] elbe: documentation of password handling

Holger Dengler holger at hdengler.de
Wed Jul 6 12:12:23 CEST 2022


This series contains additions to the documentation, how to deal with
passwords (plain-text or hashed) in XMLs. If you want to change the wording
or the location of the additions, please feel free to change.

I personally would also have a strong (paranoid?) recommendation, how to
handle passwords in XMLs, but it is not included in the patch. But let me
give you some key points here:
- use only hashed passwords in XML
- manage the plain-text passwords for Elbe target systems externally
- use login action (with the plain-text password for root) only in a variant
  for testing
- never deliver testing variant builds to the field

Changes since v1:
- typos
- picked R-b

The series is also available on github:
To github.com:hdengler/elbe.git
 + 081819e05...a2b526def tip -> tip (forced update)

Holger Dengler (1):
  docs: Describe the password handling in XMLs

 docs/elbeoverview-en.txt | 65 +++++++++++++++++++++++++++++++++++++++-
 docs/quickstart.txt      | 21 +++++++++++++
 2 files changed, 85 insertions(+), 1 deletion(-)

-- 
2.36.1



More information about the elbe-devel mailing list