From 56b72eff6cd578556dfc09a1a062e5ed18753c11 Mon Sep 17 00:00:00 2001 From: Jake Hunsaker Date: Mon, 18 Apr 2022 15:18:20 -0400 Subject: [cleaner] Allow disabling specific parsers individually Adds a new `--disable-parsers` option that allows users to selectively disable parsers for a given execution of `sos clean`. This may be useful in specific scenarios where obfuscation is not strictly needed for all the types of data we obfuscate, and where the user trusts whomever may be receiving the archive for review. Signed-off-by: Jake Hunsaker --- man/en/sos-clean.1 | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'man') diff --git a/man/en/sos-clean.1 b/man/en/sos-clean.1 index 358ec0cb..7fd2df08 100644 --- a/man/en/sos-clean.1 +++ b/man/en/sos-clean.1 @@ -4,6 +4,7 @@ sos clean - Obfuscate sensitive data from one or more sosreports .SH SYNOPSIS .B sos clean TARGET [options] [\-\-domains] + [\-\-disable-parsers] [\-\-keywords] [\-\-keyword-file] [\-\-map-file] @@ -51,6 +52,17 @@ match a domain given via this option will also be obfuscated. For example, if \fB\-\-domains redhat.com\fR is specified, then 'redhat.com' will be obfuscated, as will 'www.redhat.com' and subdomains such as 'foo.redhat.com'. .TP +.B \-\-disable-parsers PARSERS +Provide a comma-delimited list of parsers to disable when cleaning an archive. By +default all parsers are enabled. + +Note that using this option is very likely to leave sensitive information in place in +the target archive, so only use this option when absolutely necessary or you have complete +trust in the party/parties that may handle the generated report. + +Valid values for this option are currently: \fBhostname\fR, \fBip\fR, \fBmac\fR, \fBkeyword\fR, +and \fBusername\fR. +.TP .B \-\-keywords KEYWORDS Provide a comma-delimited list of keywords to scrub in addition to the default parsers. -- cgit