From daad18ee5db3f99a454e532babc59daa078ddb80 Mon Sep 17 00:00:00 2001
From: "Bryn M. Reeves" <bmr@redhat.com>
Date: Tue, 1 Nov 2011 09:00:00 +0000
Subject: Do not collect subscription manager keys in general plugin

Resolves: bz750607 {CVE-2011-4083}
---
 sos/plugins/general.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sos/plugins/general.py b/sos/plugins/general.py
index ff55f8d9..004c49bf 100644
--- a/sos/plugins/general.py
+++ b/sos/plugins/general.py
@@ -58,6 +58,7 @@ class general(sos.plugintools.PluginBase):
                 self.addCopySpec("/etc/pki/entitlement/*.pem")
                 self.addCopySpec("/etc/rhsm/")
                 self.addForbiddenPath("/etc/pki/entitlement/key.pem")
+                self.addForbiddenPath("/etc/pki/entitlement/*-key.pem")
 
         if self.getOption('all_logs'):
             if rhelver == 5 or rhelver == 4:
-- 
cgit