From c47c0bcb33e154b82b4f6b90984aba998fcc4f18 Mon Sep 17 00:00:00 2001 From: Daniel P. Berrangé Date: Thu, 11 Mar 2021 11:43:43 +0000 Subject: ui: deprecate "password" option for SPICE server With the new "password-secret" option, there is no reason to use the old inecure "password" option with -spice, so it can be deprecated. Signed-off-by: Daniel P. Berrangé Message-Id: <20210311114343.439820-4-berrange@redhat.com> Signed-off-by: Gerd Hoffmann --- docs/system/deprecated.rst | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'docs/system') diff --git a/docs/system/deprecated.rst b/docs/system/deprecated.rst index 5e3a31c123..8cba672a7b 100644 --- a/docs/system/deprecated.rst +++ b/docs/system/deprecated.rst @@ -174,6 +174,14 @@ Input parameters that take a size value should only use a size suffix the value is hexadecimal. That is, '0x20M' is deprecated, and should be written either as '32M' or as '0x2000000'. +``-spice password=string`` (since 6.0) +'''''''''''''''''''''''''''''''''''''' + +This option is insecure because the SPICE password remains visible in +the process listing. This is replaced by the new ``password-secret`` +option which lets the password be securely provided on the command +line using a ``secret`` object instance. + QEMU Machine Protocol (QMP) commands ------------------------------------ -- cgit v1.2.3-55-g7522