aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSandro Bonazzola <sbonazzo redhat com>2014-12-16 12:34:24 +0000
committerBryn M. Reeves <bmr@redhat.com>2014-12-16 12:34:24 +0000
commit6cf993a6e5da252525d55374b984fe76e688ff51 (patch)
treec69750b9e07634cf4609b2cbd413ecc7dbf7460a
parent0a63fff9037848c8c240134fb8fff7e97e958a9d (diff)
downloadsos-6cf993a6e5da252525d55374b984fe76e688ff51.tar.gz
[ovirt] remove password leak from engine setup answer file
Signed-off-by: Sandro Bonazzola <sbonazzo@redhat.com> Signed-off-by: Bryn M. Reeves <bmr@redhat.com>
-rw-r--r--sos/plugins/ovirt.py15
1 files changed, 15 insertions, 0 deletions
diff --git a/sos/plugins/ovirt.py b/sos/plugins/ovirt.py
index 6e3a0925..638a07b1 100644
--- a/sos/plugins/ovirt.py
+++ b/sos/plugins/ovirt.py
@@ -197,5 +197,20 @@ class Ovirt(Plugin, RedHatPlugin):
r'{key}=********'.format(key=key)
)
+ # Answer files contain passwords
+ for key in (
+ 'OVESETUP_CONFIG/adminPassword',
+ 'OVESETUP_CONFIG/remoteEngineHostRootPassword',
+ 'OVESETUP_DWH_DB/password',
+ 'OVESETUP_DB/password',
+ 'OVESETUP_REPORTS_CONFIG/adminPassword',
+ 'OVESETUP_REPORTS_DB/password',
+ ):
+ self.do_path_regex_sub(
+ r'/var/lib/ovirt-engine/setup/answers/.*',
+ r'{key}=(.*)'.format(key=key),
+ r'{key}=********'.format(key=key)
+ )
+
# vim: expandtab tabstop=4 shiftwidth=4