Bug 1449267 - Log Masking
Summary: Log Masking
Keywords:
Status: CLOSED EOL
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: RFE
Version: 3.6.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Michal Fojtik
QA Contact: Xiaoli Tian
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-05-09 13:51 UTC by Jeremy Davis
Modified: 2019-10-28 11:44 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-03-04 21:31:11 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Jeremy Davis 2017-05-09 13:51:05 UTC
Description of problem:
In order to protect sensitive data in accordance with regulation, compliance, and corporate policy log masking should be available.  Specified variables should be automatically masked when logged.

Version-Release number of selected component (if applicable):
None

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:
Logs are viewable as plain text.

Expected results:
Specified variables in the logs should not be viewable as plain text.


Additional info:

Comment 1 Paul Weil 2017-05-09 13:57:04 UTC
Jeremy, 

What types of items are being requested here to be masked?  Are you requesting that this be a configurable filter on logging (which I don't think is possible without significant changes to the log package)?

Comment 2 Jeremy Davis 2017-05-22 12:49:52 UTC
Paul,

I am requesting a filter.  The customer needs a way to mask values logged from the application, for example, social security numbers or patient names.

I don't think it would have to be too configurable.

Comment 3 Jeff Cantrill 2018-11-19 15:20:53 UTC
@Tushar,

Revisiting the backlog during grooming.  Why is this the responsibility of the logging stack and not the application that generates the logs?  If the information is so sensitive that it shouldn't be visible, then the application which writes the information should be responsible IMO

Comment 4 Rich Megginson 2018-11-19 15:25:33 UTC
@Jeremy - same question as above - why would logging be special in this regard?  Once the data is emitted by the application, it is fair game for everyone, not just logging.

Comment 6 Jeff Cantrill 2019-03-04 21:31:11 UTC
Closing in favor of https://jira.coreos.com/browse/LOG-49


Note You need to log in before you can comment on or make changes to this bug.