aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorSean Whitton <spwhitton@spwhitton.name>2021-07-22 15:20:09 -0700
committerSean Whitton <spwhitton@spwhitton.name>2021-07-24 15:50:38 -0700
commit7b0c6d72899a5946b1fbc4c495de4b1458e72779 (patch)
tree198c0794d0b6f303ed28454cbeb2fd4fba565ce9 /doc
parent07827bd9141d96ef89d05ba7f2596242ef0b6e27 (diff)
downloadconsfigurator-7b0c6d72899a5946b1fbc4c495de4b1458e72779.tar.gz
:SUDO: ensure that stdin is a pipe, never a real file
Signed-off-by: Sean Whitton <spwhitton@spwhitton.name> (cherry picked from commit 56dda681a644833f9b7de1775b7d193fd120bb8e)
Diffstat (limited to 'doc')
-rw-r--r--doc/connections.rst4
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/connections.rst b/doc/connections.rst
index 58b8dfe..be3ed80 100644
--- a/doc/connections.rst
+++ b/doc/connections.rst
@@ -97,7 +97,9 @@ Consfigurator sends your sudo password on stdin, so if the assumption that a
password is required is violated, your sudo password will end up in the stdin
to whatever command is being run using sudo. There is no facility for
directly passing in a passphrase; you must use ``:AS`` to obtain passwords
-from sources of prerequisite data.
+from sources of prerequisite data. The passphrase will be written to a
+private temporary file which is deleted when the ``:SUDO`` connection is torn
+down.
If any connection types which start up remote Lisp images occur before a
``:SUDO`` entry in your connection chain, ``ESTABLISH-CONNECTION`` will need