+#. type: =head1
+#: ../clone/virt-sysprep.pod:429 ../src/guestfs.pod:1149
+msgid "SECURITY"
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:431
+msgid ""
+"Although virt-sysprep removes some sensitive information from the guest, it "
+"does not pretend to remove all of it. You should examine the L</OPERATIONS> "
+"above, and the implementation of the operations in the shell script. You "
+"should also examine the guest afterwards."
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:436
+msgid ""
+"Sensitive files are simply removed. The data they contained may still exist "
+"on the disk, easily recovered with a hex editor or undelete tool. Use "
+"L<virt-sparsify(1)> as one way to remove this content. See also the L<scrub"
+"(1)> command to get rid of deleted content in directory entries and inodes."
+msgstr ""
+
+#. type: =head2
+#: ../clone/virt-sysprep.pod:442
+msgid "RANDOM SEED"
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:444
+msgid "I<(This section applies to Linux guests only)>"
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:446
+msgid ""
+"The virt-sysprep C<random-seed> operation writes a few bytes of randomness "
+"from the host into the guest's random seed file."
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:449
+msgid ""
+"If this is just done once and the guest is cloned from the same template, "
+"then each guest will start with the same entropy, and things like SSH host "
+"keys and TCP sequence numbers may be predictable."
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:453
+msgid ""
+"Therefore you should arrange to add more randomness I<after> cloning from a "
+"template too, which can be done by just enabling the C<random-seed> "
+"operation:"
+msgstr ""
+
+#. type: verbatim
+#: ../clone/virt-sysprep.pod:457
+#, no-wrap
+msgid ""
+" cp template.img newguest.img\n"
+" virt-sysprep --enable=random-seed -a newguest.img\n"
+"\n"
+msgstr ""
+
+#. type: =head2
+#: ../clone/virt-sysprep.pod:460
+msgid "SELINUX RELABELLING"
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:462
+msgid "I<(This section applies to Linux guests using SELinux only)>"
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:464
+msgid ""
+"If any new files are created by virt-sysprep, then virt-sysprep touches C</."
+"autorelabel> so that these will be correctly labelled by SELinux the next "
+"time the guest is booted. This process interrupts boot and can take some "
+"time."
+msgstr ""
+
+#. type: textblock
+#: ../clone/virt-sysprep.pod:469
+msgid ""
+"You can force relabelling for all guests by supplying the I<--selinux-"
+"relabel> option."
+msgstr ""
+
-#: ../fish/guestfish-actions.pod:1796 ../fish/guestfish-actions.pod:1883
-#: ../fish/guestfish-actions.pod:1962 ../fish/guestfish-actions.pod:1974
-#: ../fish/guestfish-actions.pod:2058 ../fish/guestfish-actions.pod:2119
-#: ../fish/guestfish-actions.pod:2140 ../fish/guestfish-actions.pod:2154
-#: ../fish/guestfish-actions.pod:2194 ../fish/guestfish-actions.pod:2226
-#: ../fish/guestfish-actions.pod:2239 ../fish/guestfish-actions.pod:2252
-#: ../fish/guestfish-actions.pod:2262 ../fish/guestfish-actions.pod:2272
-#: ../fish/guestfish-actions.pod:2284 ../fish/guestfish-actions.pod:2380
-#: ../fish/guestfish-actions.pod:2414 ../src/guestfs-actions.pod:2747
-#: ../src/guestfs-actions.pod:2841 ../src/guestfs-actions.pod:2945
-#: ../src/guestfs-actions.pod:2964 ../src/guestfs-actions.pod:3095
-#: ../src/guestfs-actions.pod:3178 ../src/guestfs-actions.pod:3206
-#: ../src/guestfs-actions.pod:3227 ../src/guestfs-actions.pod:3280
-#: ../src/guestfs-actions.pod:3320 ../src/guestfs-actions.pod:3340
-#: ../src/guestfs-actions.pod:3360 ../src/guestfs-actions.pod:3377
-#: ../src/guestfs-actions.pod:3393 ../src/guestfs-actions.pod:3411
-#: ../src/guestfs-actions.pod:3513 ../src/guestfs-actions.pod:3554
+#: ../fish/guestfish-actions.pod:1796 ../fish/guestfish-actions.pod:1891
+#: ../fish/guestfish-actions.pod:1970 ../fish/guestfish-actions.pod:1982
+#: ../fish/guestfish-actions.pod:2066 ../fish/guestfish-actions.pod:2128
+#: ../fish/guestfish-actions.pod:2149 ../fish/guestfish-actions.pod:2163
+#: ../fish/guestfish-actions.pod:2203 ../fish/guestfish-actions.pod:2239
+#: ../fish/guestfish-actions.pod:2252 ../fish/guestfish-actions.pod:2265
+#: ../fish/guestfish-actions.pod:2275 ../fish/guestfish-actions.pod:2285
+#: ../fish/guestfish-actions.pod:2297 ../fish/guestfish-actions.pod:2393
+#: ../fish/guestfish-actions.pod:2427 ../src/guestfs-actions.pod:2747
+#: ../src/guestfs-actions.pod:2849 ../src/guestfs-actions.pod:2953
+#: ../src/guestfs-actions.pod:2972 ../src/guestfs-actions.pod:3103
+#: ../src/guestfs-actions.pod:3187 ../src/guestfs-actions.pod:3215
+#: ../src/guestfs-actions.pod:3236 ../src/guestfs-actions.pod:3289
+#: ../src/guestfs-actions.pod:3333 ../src/guestfs-actions.pod:3353
+#: ../src/guestfs-actions.pod:3373 ../src/guestfs-actions.pod:3390
+#: ../src/guestfs-actions.pod:3406 ../src/guestfs-actions.pod:3424
+#: ../src/guestfs-actions.pod:3526 ../src/guestfs-actions.pod:3567
-#: ../src/guestfs-actions.pod:3774 ../src/guestfs-actions.pod:3789
-#: ../src/guestfs-actions.pod:3814 ../src/guestfs-actions.pod:4003
-#: ../src/guestfs-actions.pod:4017 ../src/guestfs-actions.pod:4030
-#: ../src/guestfs-actions.pod:4044 ../src/guestfs-actions.pod:4059
-#: ../src/guestfs-actions.pod:4095 ../src/guestfs-actions.pod:4167
-#: ../src/guestfs-actions.pod:4187 ../src/guestfs-actions.pod:4204
-#: ../src/guestfs-actions.pod:4227 ../src/guestfs-actions.pod:4250
-#: ../src/guestfs-actions.pod:4285 ../src/guestfs-actions.pod:4304
-#: ../src/guestfs-actions.pod:4323 ../src/guestfs-actions.pod:4358
-#: ../src/guestfs-actions.pod:4370 ../src/guestfs-actions.pod:4406
-#: ../src/guestfs-actions.pod:4422 ../src/guestfs-actions.pod:4435
-#: ../src/guestfs-actions.pod:4450 ../src/guestfs-actions.pod:4467
-#: ../src/guestfs-actions.pod:4560 ../src/guestfs-actions.pod:4580
-#: ../src/guestfs-actions.pod:4593 ../src/guestfs-actions.pod:4644
-#: ../src/guestfs-actions.pod:4662 ../src/guestfs-actions.pod:4680
-#: ../src/guestfs-actions.pod:4696 ../src/guestfs-actions.pod:4710
-#: ../src/guestfs-actions.pod:4724 ../src/guestfs-actions.pod:4741
-#: ../src/guestfs-actions.pod:4756 ../src/guestfs-actions.pod:4783
-#: ../src/guestfs-actions.pod:4846 ../src/guestfs-actions.pod:4919
-#: ../src/guestfs-actions.pod:4950 ../src/guestfs-actions.pod:4969
-#: ../src/guestfs-actions.pod:4988 ../src/guestfs-actions.pod:5000
-#: ../src/guestfs-actions.pod:5017 ../src/guestfs-actions.pod:5030
-#: ../src/guestfs-actions.pod:5045 ../src/guestfs-actions.pod:5060
-#: ../src/guestfs-actions.pod:5092 ../src/guestfs-actions.pod:5118
-#: ../src/guestfs-actions.pod:5157 ../src/guestfs-actions.pod:5177
-#: ../src/guestfs-actions.pod:5191 ../src/guestfs-actions.pod:5208
-#: ../src/guestfs-actions.pod:5257 ../src/guestfs-actions.pod:5310
-#: ../src/guestfs-actions.pod:5357 ../src/guestfs-actions.pod:5400
-#: ../src/guestfs-actions.pod:5428 ../src/guestfs-actions.pod:5445
-#: ../src/guestfs-actions.pod:5463 ../src/guestfs-actions.pod:5603
-#: ../src/guestfs-actions.pod:5660 ../src/guestfs-actions.pod:5682
-#: ../src/guestfs-actions.pod:5700 ../src/guestfs-actions.pod:5732
-#: ../src/guestfs-actions.pod:5798 ../src/guestfs-actions.pod:5815
-#: ../src/guestfs-actions.pod:5828 ../src/guestfs-actions.pod:5842
-#: ../src/guestfs-actions.pod:6131 ../src/guestfs-actions.pod:6150
-#: ../src/guestfs-actions.pod:6169 ../src/guestfs-actions.pod:6183
-#: ../src/guestfs-actions.pod:6195 ../src/guestfs-actions.pod:6209
-#: ../src/guestfs-actions.pod:6221 ../src/guestfs-actions.pod:6235
-#: ../src/guestfs-actions.pod:6251 ../src/guestfs-actions.pod:6272
-#: ../src/guestfs-actions.pod:6291 ../src/guestfs-actions.pod:6310
-#: ../src/guestfs-actions.pod:6340 ../src/guestfs-actions.pod:6358
-#: ../src/guestfs-actions.pod:6381 ../src/guestfs-actions.pod:6399
-#: ../src/guestfs-actions.pod:6418 ../src/guestfs-actions.pod:6439
-#: ../src/guestfs-actions.pod:6458 ../src/guestfs-actions.pod:6475
-#: ../src/guestfs-actions.pod:6494 ../src/guestfs-actions.pod:6522
-#: ../src/guestfs-actions.pod:6546 ../src/guestfs-actions.pod:6565
-#: ../src/guestfs-actions.pod:6581 ../src/guestfs-actions.pod:6605
-#: ../src/guestfs-actions.pod:6624 ../src/guestfs-actions.pod:6639
-#: ../src/guestfs-actions.pod:6658 ../src/guestfs-actions.pod:6702
-#: ../src/guestfs-actions.pod:6732 ../src/guestfs-actions.pod:6765
-#: ../src/guestfs-actions.pod:6880 ../src/guestfs-actions.pod:7001
-#: ../src/guestfs-actions.pod:7013 ../src/guestfs-actions.pod:7026
-#: ../src/guestfs-actions.pod:7039 ../src/guestfs-actions.pod:7061
-#: ../src/guestfs-actions.pod:7074 ../src/guestfs-actions.pod:7087
-#: ../src/guestfs-actions.pod:7100 ../src/guestfs-actions.pod:7115
-#: ../src/guestfs-actions.pod:7174 ../src/guestfs-actions.pod:7191
-#: ../src/guestfs-actions.pod:7207 ../src/guestfs-actions.pod:7223
-#: ../src/guestfs-actions.pod:7240 ../src/guestfs-actions.pod:7253
-#: ../src/guestfs-actions.pod:7273 ../src/guestfs-actions.pod:7309
-#: ../src/guestfs-actions.pod:7323 ../src/guestfs-actions.pod:7364
-#: ../src/guestfs-actions.pod:7377 ../src/guestfs-actions.pod:7395
-#: ../src/guestfs-actions.pod:7429 ../src/guestfs-actions.pod:7465
-#: ../src/guestfs-actions.pod:7581 ../src/guestfs-actions.pod:7596
-#: ../src/guestfs-actions.pod:7610 ../src/guestfs-actions.pod:7665
-#: ../src/guestfs-actions.pod:7678 ../src/guestfs-actions.pod:7723
-#: ../src/guestfs-actions.pod:7763 ../src/guestfs-actions.pod:7819
-#: ../src/guestfs-actions.pod:7839 ../src/guestfs-actions.pod:7872
-#: ../src/guestfs-actions.pod:7936 ../src/guestfs-actions.pod:7959
-#: ../src/guestfs-actions.pod:7988
+#: ../src/guestfs-actions.pod:3787 ../src/guestfs-actions.pod:3802
+#: ../src/guestfs-actions.pod:3827 ../src/guestfs-actions.pod:4016
+#: ../src/guestfs-actions.pod:4030 ../src/guestfs-actions.pod:4043
+#: ../src/guestfs-actions.pod:4057 ../src/guestfs-actions.pod:4072
+#: ../src/guestfs-actions.pod:4108 ../src/guestfs-actions.pod:4180
+#: ../src/guestfs-actions.pod:4200 ../src/guestfs-actions.pod:4217
+#: ../src/guestfs-actions.pod:4240 ../src/guestfs-actions.pod:4263
+#: ../src/guestfs-actions.pod:4298 ../src/guestfs-actions.pod:4317
+#: ../src/guestfs-actions.pod:4336 ../src/guestfs-actions.pod:4371
+#: ../src/guestfs-actions.pod:4383 ../src/guestfs-actions.pod:4419
+#: ../src/guestfs-actions.pod:4435 ../src/guestfs-actions.pod:4448
+#: ../src/guestfs-actions.pod:4463 ../src/guestfs-actions.pod:4480
+#: ../src/guestfs-actions.pod:4573 ../src/guestfs-actions.pod:4593
+#: ../src/guestfs-actions.pod:4606 ../src/guestfs-actions.pod:4657
+#: ../src/guestfs-actions.pod:4675 ../src/guestfs-actions.pod:4693
+#: ../src/guestfs-actions.pod:4709 ../src/guestfs-actions.pod:4723
+#: ../src/guestfs-actions.pod:4737 ../src/guestfs-actions.pod:4754
+#: ../src/guestfs-actions.pod:4769 ../src/guestfs-actions.pod:4796
+#: ../src/guestfs-actions.pod:4859 ../src/guestfs-actions.pod:4932
+#: ../src/guestfs-actions.pod:4963 ../src/guestfs-actions.pod:4982
+#: ../src/guestfs-actions.pod:5001 ../src/guestfs-actions.pod:5013
+#: ../src/guestfs-actions.pod:5030 ../src/guestfs-actions.pod:5043
+#: ../src/guestfs-actions.pod:5058 ../src/guestfs-actions.pod:5073
+#: ../src/guestfs-actions.pod:5105 ../src/guestfs-actions.pod:5131
+#: ../src/guestfs-actions.pod:5170 ../src/guestfs-actions.pod:5190
+#: ../src/guestfs-actions.pod:5204 ../src/guestfs-actions.pod:5221
+#: ../src/guestfs-actions.pod:5270 ../src/guestfs-actions.pod:5323
+#: ../src/guestfs-actions.pod:5370 ../src/guestfs-actions.pod:5413
+#: ../src/guestfs-actions.pod:5441 ../src/guestfs-actions.pod:5458
+#: ../src/guestfs-actions.pod:5476 ../src/guestfs-actions.pod:5616
+#: ../src/guestfs-actions.pod:5673 ../src/guestfs-actions.pod:5695
+#: ../src/guestfs-actions.pod:5713 ../src/guestfs-actions.pod:5745
+#: ../src/guestfs-actions.pod:5811 ../src/guestfs-actions.pod:5828
+#: ../src/guestfs-actions.pod:5841 ../src/guestfs-actions.pod:5855
+#: ../src/guestfs-actions.pod:6144 ../src/guestfs-actions.pod:6163
+#: ../src/guestfs-actions.pod:6182 ../src/guestfs-actions.pod:6196
+#: ../src/guestfs-actions.pod:6208 ../src/guestfs-actions.pod:6222
+#: ../src/guestfs-actions.pod:6234 ../src/guestfs-actions.pod:6248
+#: ../src/guestfs-actions.pod:6264 ../src/guestfs-actions.pod:6285
+#: ../src/guestfs-actions.pod:6304 ../src/guestfs-actions.pod:6323
+#: ../src/guestfs-actions.pod:6353 ../src/guestfs-actions.pod:6371
+#: ../src/guestfs-actions.pod:6394 ../src/guestfs-actions.pod:6412
+#: ../src/guestfs-actions.pod:6431 ../src/guestfs-actions.pod:6452
+#: ../src/guestfs-actions.pod:6471 ../src/guestfs-actions.pod:6488
+#: ../src/guestfs-actions.pod:6507 ../src/guestfs-actions.pod:6535
+#: ../src/guestfs-actions.pod:6559 ../src/guestfs-actions.pod:6578
+#: ../src/guestfs-actions.pod:6594 ../src/guestfs-actions.pod:6618
+#: ../src/guestfs-actions.pod:6637 ../src/guestfs-actions.pod:6652
+#: ../src/guestfs-actions.pod:6671 ../src/guestfs-actions.pod:6715
+#: ../src/guestfs-actions.pod:6745 ../src/guestfs-actions.pod:6778
+#: ../src/guestfs-actions.pod:6893 ../src/guestfs-actions.pod:7014
+#: ../src/guestfs-actions.pod:7026 ../src/guestfs-actions.pod:7039
+#: ../src/guestfs-actions.pod:7052 ../src/guestfs-actions.pod:7074
+#: ../src/guestfs-actions.pod:7087 ../src/guestfs-actions.pod:7100
+#: ../src/guestfs-actions.pod:7113 ../src/guestfs-actions.pod:7128
+#: ../src/guestfs-actions.pod:7187 ../src/guestfs-actions.pod:7204
+#: ../src/guestfs-actions.pod:7220 ../src/guestfs-actions.pod:7236
+#: ../src/guestfs-actions.pod:7253 ../src/guestfs-actions.pod:7266
+#: ../src/guestfs-actions.pod:7286 ../src/guestfs-actions.pod:7322
+#: ../src/guestfs-actions.pod:7336 ../src/guestfs-actions.pod:7377
+#: ../src/guestfs-actions.pod:7390 ../src/guestfs-actions.pod:7408
+#: ../src/guestfs-actions.pod:7442 ../src/guestfs-actions.pod:7478
+#: ../src/guestfs-actions.pod:7594 ../src/guestfs-actions.pod:7609
+#: ../src/guestfs-actions.pod:7623 ../src/guestfs-actions.pod:7678
+#: ../src/guestfs-actions.pod:7691 ../src/guestfs-actions.pod:7736
+#: ../src/guestfs-actions.pod:7776 ../src/guestfs-actions.pod:7832
+#: ../src/guestfs-actions.pod:7852 ../src/guestfs-actions.pod:7885
+#: ../src/guestfs-actions.pod:7949 ../src/guestfs-actions.pod:7972
+#: ../src/guestfs-actions.pod:8001
-#: ../src/guestfs-actions.pod:2843 ../src/guestfs-actions.pod:2947
-#: ../src/guestfs-actions.pod:2966 ../src/guestfs-actions.pod:3180
-#: ../src/guestfs-actions.pod:3208 ../src/guestfs-actions.pod:3229
-#: ../src/guestfs-actions.pod:3263 ../src/guestfs-actions.pod:3322
-#: ../src/guestfs-actions.pod:3342 ../src/guestfs-actions.pod:3362
-#: ../src/guestfs-actions.pod:3989 ../src/guestfs-actions.pod:4342
-#: ../src/guestfs-actions.pod:4512 ../src/guestfs-actions.pod:4622
-#: ../src/guestfs-actions.pod:5518 ../src/guestfs-actions.pod:5717
-#: ../src/guestfs-actions.pod:5887 ../src/guestfs-actions.pod:6065
-#: ../src/guestfs-actions.pod:6114 ../src/guestfs-actions.pod:6786
-#: ../src/guestfs-actions.pod:6802 ../src/guestfs-actions.pod:6826
-#: ../src/guestfs-actions.pod:6850 ../src/guestfs-actions.pod:7524
-#: ../src/guestfs-actions.pod:7543 ../src/guestfs-actions.pod:7561
-#: ../src/guestfs-actions.pod:7735 ../src/guestfs-actions.pod:8052
+#: ../src/guestfs-actions.pod:2851 ../src/guestfs-actions.pod:2955
+#: ../src/guestfs-actions.pod:2974 ../src/guestfs-actions.pod:3189
+#: ../src/guestfs-actions.pod:3217 ../src/guestfs-actions.pod:3238
+#: ../src/guestfs-actions.pod:3272 ../src/guestfs-actions.pod:3335
+#: ../src/guestfs-actions.pod:3355 ../src/guestfs-actions.pod:3375
+#: ../src/guestfs-actions.pod:4002 ../src/guestfs-actions.pod:4355
+#: ../src/guestfs-actions.pod:4525 ../src/guestfs-actions.pod:4635
+#: ../src/guestfs-actions.pod:5531 ../src/guestfs-actions.pod:5730
+#: ../src/guestfs-actions.pod:5900 ../src/guestfs-actions.pod:6078
+#: ../src/guestfs-actions.pod:6127 ../src/guestfs-actions.pod:6799
+#: ../src/guestfs-actions.pod:6815 ../src/guestfs-actions.pod:6839
+#: ../src/guestfs-actions.pod:6863 ../src/guestfs-actions.pod:7537
+#: ../src/guestfs-actions.pod:7556 ../src/guestfs-actions.pod:7574
+#: ../src/guestfs-actions.pod:7748 ../src/guestfs-actions.pod:8065
-#: ../src/guestfs-actions.pod:2908 ../src/guestfs-actions.pod:3282
-#: ../src/guestfs-actions.pod:3558 ../src/guestfs-actions.pod:3872
-#: ../src/guestfs-actions.pod:3889 ../src/guestfs-actions.pod:3909
-#: ../src/guestfs-actions.pod:3971 ../src/guestfs-actions.pod:4076
-#: ../src/guestfs-actions.pod:4484 ../src/guestfs-actions.pod:5241
-#: ../src/guestfs-actions.pod:5859 ../src/guestfs-actions.pod:5985
-#: ../src/guestfs-actions.pod:6099 ../src/guestfs-actions.pod:6866
-#: ../src/guestfs-actions.pod:6927 ../src/guestfs-actions.pod:6982
-#: ../src/guestfs-actions.pod:7128 ../src/guestfs-actions.pod:7152
-#: ../src/guestfs-actions.pod:7628 ../src/guestfs-actions.pod:7648
-#: ../src/guestfs-actions.pod:7695 ../src/guestfs-actions.pod:7889
-#: ../src/guestfs-actions.pod:7908 ../src/guestfs-actions.pod:8002
-#: ../src/guestfs-actions.pod:8021 ../src/guestfs-actions.pod:8067
-#: ../src/guestfs-actions.pod:8086
+#: ../src/guestfs-actions.pod:2916 ../src/guestfs-actions.pod:3291
+#: ../src/guestfs-actions.pod:3571 ../src/guestfs-actions.pod:3885
+#: ../src/guestfs-actions.pod:3902 ../src/guestfs-actions.pod:3922
+#: ../src/guestfs-actions.pod:3984 ../src/guestfs-actions.pod:4089
+#: ../src/guestfs-actions.pod:4497 ../src/guestfs-actions.pod:5254
+#: ../src/guestfs-actions.pod:5872 ../src/guestfs-actions.pod:5998
+#: ../src/guestfs-actions.pod:6112 ../src/guestfs-actions.pod:6879
+#: ../src/guestfs-actions.pod:6940 ../src/guestfs-actions.pod:6995
+#: ../src/guestfs-actions.pod:7141 ../src/guestfs-actions.pod:7165
+#: ../src/guestfs-actions.pod:7641 ../src/guestfs-actions.pod:7661
+#: ../src/guestfs-actions.pod:7708 ../src/guestfs-actions.pod:7902
+#: ../src/guestfs-actions.pod:7921 ../src/guestfs-actions.pod:8015
+#: ../src/guestfs-actions.pod:8034 ../src/guestfs-actions.pod:8080
+#: ../src/guestfs-actions.pod:8099