Description of problem: When abrt on RHEL6.3 (with abrt-addon-vmcore + kdump installed) copies a kernel core to a centralised server it dumps the following info in clear text into /var/log/messages: # # # Sep 12 14:47:02 ipa abrtd: Successfully sent /tmp/abrt-upload-2012-09-11-14:46:28-2528.tar.gz to scp://root:password.0.1/var/spool/abrt-upload/vmcore-ipa.redhat.local.tar.gz - I believe we can strip the part before '@' and print only the path
Cause The logging message contained a login and password Consequence The login and password used for uploading reports to ftp were visible in syslog Fix Don't print the login/password in log messages Result Login and password is not visible in syslog
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2013-0290.html