[pbs-devel] [RFC proxmox-backup] add "password hint" to KeyConfig

Dietmar Maurer dietmar at proxmox.com
Wed Jan 20 17:59:08 CET 2021


> does it make sense to split the "public" (misleading naming ;)) and 
> private part in tape_encryption_keys.rs? it seems to me that we 
> access/modify them together, so we might want to make it a single file 
> to avoid running out of sync? i.e., EncryptionKeyInfo could just get the 
> KeyConfig as field as well, and we store a list/map of those..

I have done the split to protect the private part (only accessible by root).
The public part can be accessed (and even modified (change password) by user backup).





More information about the pbs-devel mailing list