aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJake Hunsaker <jhunsake@redhat.com>2018-09-04 11:52:58 -0400
committerBryn M. Reeves <bmr@redhat.com>2019-03-18 10:11:53 +0000
commit20b4c4f4301410bddc35b7b55b4319cf6f45b5a6 (patch)
tree6b97dbbf588e377e833d181244adf757767ef070
parent14cd023ee35013199208770928be12ffd49f5505 (diff)
downloadsos-20b4c4f4301410bddc35b7b55b4319cf6f45b5a6.tar.gz
[etcd] Don't collect private .key files
Prevent the etcd plugin from capturing private keys. Closes: #1403 Resolves: #1414 Signed-off-by: Jake Hunsaker <jhunsake@redhat.com> Signed-off-by: Bryn M. Reeves <bmr@redhat.com>
-rw-r--r--sos/plugins/etcd.py5
1 files changed, 4 insertions, 1 deletions
diff --git a/sos/plugins/etcd.py b/sos/plugins/etcd.py
index c8ee3849..1ad59322 100644
--- a/sos/plugins/etcd.py
+++ b/sos/plugins/etcd.py
@@ -30,7 +30,10 @@ class etcd(Plugin, RedHatPlugin):
etcd_url = self.get_etcd_url()
- self.add_forbidden_path('/etc/etcd/ca')
+ self.add_forbidden_path([
+ '/etc/etcd/ca',
+ '/etc/etcd/*.key'
+ ])
self.add_copy_spec('/etc/etcd')
subcmds = [