summaryrefslogtreecommitdiffstats
path: root/README-dracut.md
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2016-05-04 15:37:53 +0200
committerGravatar Christian Hesse <mail@eworm.de>2016-05-04 15:37:53 +0200
commit49200cf2e80f7d23d2a2717130486316a9e12698 (patch)
tree59bcdf0f923b7be253948fc07a185f79eefdea36 /README-dracut.md
parent6dd5a36699b4d46296cff6526f203212ab7405b6 (diff)
downloadmkinitcpio-ykfde-49200cf2e80f7d23d2a2717130486316a9e12698.tar.gz
mkinitcpio-ykfde-49200cf2e80f7d23d2a2717130486316a9e12698.tar.zst
support reading second factor from terminal
This increases security by not displaying on display and not writing to shell history.
Diffstat (limited to 'README-dracut.md')
-rw-r--r--README-dracut.md4
1 files changed, 4 insertions, 0 deletions
diff --git a/README-dracut.md b/README-dracut.md
index d84f4b9..a410438 100644
--- a/README-dracut.md
+++ b/README-dracut.md
@@ -83,6 +83,10 @@ And updating key and second factor is straight forward:
> ykfde -s old-2nd-factor -n new-2nd-factor
+The second factor can be read from terminal, increasing security by not
+displaying on display and not writing to shell history. Use capital
+switches (`-S` and `-N`) for that.
+
Make sure to enable second factor in `/etc/ykfde.conf`.
### cpio archive with challenges