diff options
| author | Nijin Ashok <nashok@redhat.com> | 2015-10-17 19:36:20 +0530 |
|---|---|---|
| committer | Bryn M. Reeves <bmr@redhat.com> | 2015-12-18 17:24:49 +0000 |
| commit | 8b8c8bd1fe535038ff3372cd39413bb6765f1081 (patch) | |
| tree | d7c49886c48a63b476a778e01f7d0d43421e4f38 | |
| parent | 7799b1bff7a3faa609752152198e72c149983e94 (diff) | |
| download | sos-8b8c8bd1fe535038ff3372cd39413bb6765f1081.tar.gz | |
[ovirt] Remove database password from AAA_JDBC profile files
Ovirt AAA_JDBC stores database password in plain text under
/etc/ovirt-engine/aaa/*.properties file.
It contains password in the format:
config.datasource.dbpassword=<password>
The engine PostgreSQL user password and the custom build domain's user
password exist in plain text format in these files. The commit removes
these password from the sosreport.
Fixes: #666.
Signed-off-by: Nijin Ashok <nashok@redhat.com>
| -rw-r--r-- | sos/plugins/ovirt.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sos/plugins/ovirt.py b/sos/plugins/ovirt.py index 6f395a41..00f60d81 100644 --- a/sos/plugins/ovirt.py +++ b/sos/plugins/ovirt.py @@ -193,7 +193,8 @@ class Ovirt(Plugin, RedHatPlugin): protect_keys = [ "vars.password", "pool.default.auth.simple.password", - "pool.default.ssl.truststore.password" + "pool.default.ssl.truststore.password", + "config.datasource.dbpassword" ] regexp = r"((?m)^\s*#*(%s)\s*=\s*)(.*)" % "|".join(protect_keys) |