Enum NonAdministrativeSecretHandling

pub enum NonAdministrativeSecretHandling {
    Plaintext,
    SystemdCreds,
}

The handling of non-administrative secrets.

Non-administrative secrets represent passphrases for (non-Administrator) NetHSM users and may be handled in different ways (e.g. encrypted or not encrypted).

Variants

Plaintext

Each non-administrative secret is handled in a plaintext file in a non-volatile directory.

Warning

This variant should only be used in non-production test setups, as it implies the persistence of unencrypted non-administrative secrets on a file system.

SystemdCreds

Each non-administrative secret is encrypted for a specific system user using systemd-creds and the resulting files are stored in a non-volatile directory.

Note

Although secrets are stored as encrypted strings in dedicated files, they may be extracted under certain circumstances:

• the root account is compromised
  • decrypts and exfiltrates all secrets
  • the secret is not encrypted using a TPM and the file /var/lib/systemd/credential.secret as well as any encrypted secret is exfiltrated
• a specific user is compromised, decrypts and exfiltrates its own ssecret

It is therefore crucial to follow common best-practices:

• rely on a TPM for encrypting secrets, so that files become host-specific
• heavily guard access to all users, especially root

Trait Implementations

impl Clone for NonAdministrativeSecretHandling

fn clone(&self) -> NonAdministrativeSecretHandling

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NonAdministrativeSecretHandling

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NonAdministrativeSecretHandling

fn default() -> NonAdministrativeSecretHandling

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for NonAdministrativeSecretHandling

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for NonAdministrativeSecretHandling

fn eq(&self, other: &NonAdministrativeSecretHandling) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for NonAdministrativeSecretHandling

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for NonAdministrativeSecretHandling

impl Eq for NonAdministrativeSecretHandling

impl StructuralPartialEq for NonAdministrativeSecretHandling