Bug 1016012

Summary:	engine-setup sometimes logs passwords
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Yedidyah Bar David <didi>
Component:	ovirt-engine-setup	Assignee:	Yedidyah Bar David <didi>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Jiri Belka <jbelka>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	3.3.0	CC:	acathrow, alonbl, bazulay, didi, eedri, iheim, oschreib, Rhev-m-bugs, sbonazzo, yeylon
Target Milestone:	---
Target Release:	3.3.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	integration
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	1014115	Environment:
Last Closed:	2014-01-21 22:15:09 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:	1014115, 1014552
Bug Blocks:

Description Yedidyah Bar David 2013-10-07 09:57:08 UTC

+++ This bug was initially created as a clone of Bug #1014115 +++

Description of problem:

engine-setup sometimes logs passwords to its log file, although most of the code is intended to not do that. We should make sure this never happens.

Version-Release number of selected component (if applicable):


How reproducible:

E.g. while upgrading from legacy, the database-access password used by legacy is logged.

Steps to Reproduce:
1. Install ovirt 3.2, run setup, input some password for the database
2. Upgrade to 3.3
3.

Actual results:

The db password appears in the log

Expected results:

All passwords should be replaced by '**FILTERED**'

Additional info:

Comment 6 Jiri Belka 2013-10-17 14:52:22 UTC

ok, sf21.1 -> is19.

Comment 7 Itamar Heim 2014-01-21 22:15:09 UTC

Closing - RHEV 3.3 Released

Comment 8 Itamar Heim 2014-01-21 22:22:29 UTC

Closing - RHEV 3.3 Released