mirror_iproute2/man
Benedict Wong a6af9f2e61 xfrm: add option to hide keys in state output
ip xfrm state show currently dumps keys unconditionally. This limits its
use in logging, as security information can be leaked.

This patch adds a nokeys option to ip xfrm ( state show | monitor ), which
prevents the printing of keys. This allows ip xfrm state show to be used
in logging without exposing keys.

Signed-off-by: Benedict Wong <benedictwong@google.com>
Signed-off-by: David Ahern <dsahern@gmail.com>
2019-01-21 08:31:20 -08:00
..
man3 SPDX license identifiers 2017-11-24 12:21:35 -08:00
man7 SPDX license identifiers 2017-11-24 12:21:35 -08:00
man8 xfrm: add option to hide keys in state output 2019-01-21 08:31:20 -08:00
Makefile SPDX license identifiers 2017-11-24 12:21:35 -08:00