Bug 1371087

Description of problem:
If passwords are passed to IPA commands, they are visible in the "ps" output for all users/processes on the same host. For security reasons, the passwords in command line arguments should be overridden. For example, "mysql" does this.



Version-Release number of selected component (if applicable):
freeipa-server-4.4.0-0.fc24.x86_64



How reproducible:
Always



Steps to Reproduce:
1. Open two consoles: One as root, one as a user.
2. Run on the first console an ipa command that uses a password as argument. For example:
   # ipa-replica-install --principal admin --password admin_password
3. On the second console, run "ps axf" while the command on the first is running.



Actual results:
Normal users and processes on the same host are able to see the password in the process list:
[user@server ~]$ ps axf
...
  464 ?        Ss     0:00 /usr/sbin/sshd
  564 ?        Ss     0:00  \_ sshd: root [priv]
  927 ?        S      0:00  |   \_ sshd: root@pts/1
  937 pts/1    Ss     0:00  |       \_ -bash
 1113 pts/1    R+     0:00  |           \_ /usr/bin/python2 -E /usr/sbin/ipa-replica-install --principal admin --password admin_password



Expected results:
IPA should override at least the password argument (better usernames, too). For example:
[user@server ~]$ ps axf
...
 1113 pts/1    R+     0:00  |           \_ /usr/bin/python2 -E /usr/sbin/ipa-replica-install --principal xxxxxxxx --password xxxxxxxx