Bug 1016012

Summary: engine-setup sometimes logs passwords
Product: Red Hat Enterprise Virtualization Manager Reporter: Yedidyah Bar David <didi>
Component: ovirt-engine-setupAssignee: Yedidyah Bar David <didi>
Status: CLOSED CURRENTRELEASE QA Contact: Jiri Belka <jbelka>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 3.3.0CC: acathrow, alonbl, bazulay, didi, eedri, iheim, oschreib, Rhev-m-bugs, sbonazzo, yeylon
Target Milestone: ---   
Target Release: 3.3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: integration
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1014115 Environment:
Last Closed: 2014-01-21 22:15:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1014115, 1014552    
Bug Blocks:    

Description Yedidyah Bar David 2013-10-07 09:57:08 UTC 
+++ This bug was initially created as a clone of Bug #1014115 +++

Description of problem:

engine-setup sometimes logs passwords to its log file, although most of the code is intended to not do that. We should make sure this never happens.

Version-Release number of selected component (if applicable):


How reproducible:

E.g. while upgrading from legacy, the database-access password used by legacy is logged.

Steps to Reproduce:
1. Install ovirt 3.2, run setup, input some password for the database
2. Upgrade to 3.3
3.

Actual results:

The db password appears in the log

Expected results:

All passwords should be replaced by '**FILTERED**'

Additional info:
Comment 6 Jiri Belka 2013-10-17 14:52:22 UTC 
ok, sf21.1 -> is19.
Comment 7 Itamar Heim 2014-01-21 22:15:09 UTC 
Closing - RHEV 3.3 Released
Comment 8 Itamar Heim 2014-01-21 22:22:29 UTC 
Closing - RHEV 3.3 Released