Bug 1546830
| Summary: | Cinder logs rabbitmq password in debug log | |||
|---|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Eric Harney <eharney> | |
| Component: | openstack-cinder | Assignee: | Eric Harney <eharney> | |
| Status: | CLOSED ERRATA | QA Contact: | Avi Avraham <aavraham> | |
| Severity: | high | Docs Contact: | Kim Nylander <knylande> | |
| Priority: | high | |||
| Version: | 12.0 (Pike) | CC: | cschwede, juwu, slinaber, srevivo, tshefi | |
| Target Milestone: | z3 | Keywords: | Triaged, ZStream | |
| Target Release: | 12.0 (Pike) | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | openstack-cinder-11.1.0-2.el7ost | Doc Type: | Bug Fix | |
| Doc Text: |
With debug logging enabled, Cinder logged the RabbitMQ password into log files. With this update, the password is now masked in the log files.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 1547598 1547600 1547716 (view as bug list) | Environment: | ||
| Last Closed: | 2018-08-20 12:46:46 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 1547598, 1547600 | |||
|
Description
Eric Harney
2018-02-19 17:27:01 UTC
Verified on: openstack-cinder-11.1.0-14.el7ost.noarch Deploye a system with Cinder debug=true. From cinder.conf [root@controller-0 ~]# grep rabbit_pass /etc/cinder/cinder.conf #rabbit_password = guest rabbit_password=chPtzjPyJUEQDAcj4UkmbJyby Grepping for password returns nothing. Meaning password doesn't show up in logs any more, OK to verify. grep -ir chPtzjPyJUEQDAcj4UkmbJyby /var/log/cinder/ [root@controller-0 ~]# Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:2516 |