journalctl: expunge verification key from argv (#5081)
After parsing the --verify-key argument, overwrite it with null bytes. This minimizes (but does not completely eliminate) the time frame within which another process on the system can extract the verification key from the journalctl command line.
Loading
Please register or sign in to comment