aboutsummaryrefslogtreecommitdiff
path: root/doc/connections.rst
diff options
context:
space:
mode:
authorSean Whitton <spwhitton@spwhitton.name>2021-07-22 15:20:09 -0700
committerSean Whitton <spwhitton@spwhitton.name>2021-07-24 12:09:09 -0700
commit56dda681a644833f9b7de1775b7d193fd120bb8e (patch)
treed29f99688e2de1e4a05d772772558e43adc234b0 /doc/connections.rst
parent432bfff55a6e030426af7ba70733f1ac05f1a457 (diff)
downloadconsfigurator-56dda681a644833f9b7de1775b7d193fd120bb8e.tar.gz
:SUDO: ensure that stdin is a pipe, never a real file
Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
Diffstat (limited to 'doc/connections.rst')
-rw-r--r--doc/connections.rst4
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/connections.rst b/doc/connections.rst
index cbb1597..6e20500 100644
--- a/doc/connections.rst
+++ b/doc/connections.rst
@@ -97,7 +97,9 @@ Consfigurator sends your sudo password on stdin, so if the assumption that a
password is required is violated, your sudo password will end up in the stdin
to whatever command is being run using sudo. There is no facility for
directly passing in a passphrase; you must use ``:AS`` to obtain passwords
-from sources of prerequisite data.
+from sources of prerequisite data. The passphrase will be written to a
+private temporary file which is deleted when the ``:SUDO`` connection is torn
+down.
If any connection types which start up remote Lisp images occur before a
``:SUDO`` entry in your connection chain, ``ESTABLISH-CONNECTION`` will need