Bug 1016012 - engine-setup sometimes logs passwords
Summary: engine-setup sometimes logs passwords
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine-setup
Version: 3.3.0
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: ---
: 3.3.0
Assignee: Yedidyah Bar David
QA Contact: Jiri Belka
URL:
Whiteboard: integration
Depends On: 1014115 1014552
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-10-07 09:57 UTC by Yedidyah Bar David
Modified: 2014-01-21 22:22 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 1014115
Environment:
Last Closed: 2014-01-21 22:15:09 UTC
oVirt Team: ---
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 19775 0 None None None Never
oVirt gerrit 19938 0 None None None Never

Description Yedidyah Bar David 2013-10-07 09:57:08 UTC 
+++ This bug was initially created as a clone of Bug #1014115 +++

Description of problem:

engine-setup sometimes logs passwords to its log file, although most of the code is intended to not do that. We should make sure this never happens.

Version-Release number of selected component (if applicable):


How reproducible:

E.g. while upgrading from legacy, the database-access password used by legacy is logged.

Steps to Reproduce:
1. Install ovirt 3.2, run setup, input some password for the database
2. Upgrade to 3.3
3.

Actual results:

The db password appears in the log

Expected results:

All passwords should be replaced by '**FILTERED**'

Additional info:
Comment 6 Jiri Belka 2013-10-17 14:52:22 UTC 
ok, sf21.1 -> is19.
Comment 7 Itamar Heim 2014-01-21 22:15:09 UTC 
Closing - RHEV 3.3 Released
Comment 8 Itamar Heim 2014-01-21 22:22:29 UTC 
Closing - RHEV 3.3 Released
Note You need to log in before you can comment on or make changes to this bug.