REQ 065

REQ-065: Keep credentials out of arguments, scripts, status, and logs

Requirement

Windows provisioning shall keep credential values out of command lines, script bodies, serial records, logs, and artifacts.

Rationale

Runner and guest credentials must not become visible through process listings or captured provisioning output.

Fit Criterion

Post-Setup guest secrets use an authenticated encrypted channel's protected input stream; Windows Setup may use protected unattended media whose full lifecycle is verified. VNC authentication is not passed in a process argument. Synthetic secret canaries never appear in arguments, scripts, serial output, logs, or receipts.

Verification

Planned, TEST-065; current VNC client and VirtualBox control commands expose the VNC password in arguments, and the runner-registration script embeds a token in guest-side script text.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-065

TestArtifact

Planned secret-canary, unattended-media custody, and protected-input fixtures

CodeRef

Windows builders, VNC console, and WinRM launchers

Status

Planned