From 55d5b8b3cebb2fbb1e7980649b90c91dbd7f4e55 Mon Sep 17 00:00:00 2001
From: Pavel Moravec <pmoravec@redhat.com>
Date: Fri, 10 Mar 2017 22:27:11 +0100
Subject: [pacemaker] Scrub passwords in pcs config

passwd=.. and incoming_password=.. to be obfuscated.

Resolves: #957

Signed-off-by: Pavel Moravec <pmoravec@redhat.com>
---
 sos/plugins/pacemaker.py | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/sos/plugins/pacemaker.py b/sos/plugins/pacemaker.py
index 43083dfe..0dac1da5 100644
--- a/sos/plugins/pacemaker.py
+++ b/sos/plugins/pacemaker.py
@@ -68,4 +68,12 @@ class Pacemaker(Plugin, RedHatPlugin, DebianPlugin, UbuntuPlugin):
                             ' --dest %s --from "%s"' %
                             (crm_scrub, crm_dest, crm_from),
                             chroot=self.tmp_in_sysroot())
+
+    def postproc(self):
+        self.do_cmd_output_sub(
+            "pcs config",
+            r"(passwd=|incoming_password=)\S+",
+            r"\1********"
+        )
+
 # vim: et ts=4 sw=4
-- 
cgit