Red Hat Bugzilla – Bug 1014115
engine-setup sometimes logs passwords
Last modified: 2013-11-07 03:26:38 EST
Description of problem:
engine-setup sometimes logs passwords to its log file, although most of the code is intended to not do that. We should make sure this never happens.
Version-Release number of selected component (if applicable):
E.g. while upgrading from legacy, the database-access password used by legacy is logged.
Steps to Reproduce:
1. Install ovirt 3.2, run setup, input some password for the database
2. Upgrade to 3.3
The db password appears in the log
All passwords should be replaced by '**FILTERED**'
included in 184.108.40.206 now in updates-testing.
ok, sf21.1 -> is20.
oVirt 220.127.116.11 has been released.