From daa7c7a8dbf0e03115381bd534e71456ae3ef32e Mon Sep 17 00:00:00 2001
From: "Bryn M. Reeves" <bmr@redhat.com>
Date: Thu, 29 Nov 2012 22:45:09 +0000
Subject: Don't collect subscription manager keys in yum module (CVE-2011-4083)

---
 sos/plugins/yum.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sos/plugins/yum.py b/sos/plugins/yum.py
index 74a04130..2e74cdef 100644
--- a/sos/plugins/yum.py
+++ b/sos/plugins/yum.py
@@ -48,6 +48,7 @@ class yum(Plugin, RedHatPlugin):
 
         # candlepin info
         self.addForbiddenPath("/etc/pki/entitlements/key.pem")
+        self.addForbiddenPath("/etc/pki/entitlements/*-key.pem")
         self.addCopySpecs([
             "/etc/pki/product/*.pem",
             "/etc/pki/consumer/cert.pem",
-- 
cgit