diff options
| author | Sandro Bonazzola <sbonazzo redhat com> | 2014-12-16 12:29:57 +0000 |
|---|---|---|
| committer | Bryn M. Reeves <bmr@redhat.com> | 2014-12-16 12:29:57 +0000 |
| commit | 0aec209ec6870c6ec3cbb6e2209d35adb2b62009 (patch) | |
| tree | 7f5e2662686d7a4f7c652b2b425e799013bd55c8 | |
| parent | 7df415ede418ef582f9e6d45ff3acb1503195e1f (diff) | |
| download | sos-0aec209ec6870c6ec3cbb6e2209d35adb2b62009.tar.gz | |
[ovirt] remove ovirt-engine setup answer file password leak
Signed-off-by: Sandro Bonazzola <sbonazzo@redhat.com>
Signed-off-by: Bryn M. Reeves <bmr@redhat.com>
| -rw-r--r-- | sos/plugins/ovirt.py | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/sos/plugins/ovirt.py b/sos/plugins/ovirt.py index b169b903..407c9189 100644 --- a/sos/plugins/ovirt.py +++ b/sos/plugins/ovirt.py @@ -171,4 +171,19 @@ class Ovirt(Plugin, RedHatPlugin): r'{key}=********'.format(key=key) ) + # Answer files contain passwords + for key in ( + 'OVESETUP_CONFIG/adminPassword', + 'OVESETUP_CONFIG/remoteEngineHostRootPassword', + 'OVESETUP_DWH_DB/password', + 'OVESETUP_DB/password', + 'OVESETUP_REPORTS_CONFIG/adminPassword', + 'OVESETUP_REPORTS_DB/password', + ): + self.do_path_regex_sub( + r'/var/lib/ovirt-engine/setup/answers/.*', + r'{key}=(.*)'.format(key=key), + r'{key}=********'.format(key=key) + ) + # vim: expandtab tabstop=4 shiftwidth=4 |