Description of problem:
When abrt on RHEL6.3 (with abrt-addon-vmcore + kdump installed) copies a kernel
core to a centralised server it dumps the following info in clear text into /var/log/messages:
# # #
Sep 12 14:47:02 ipa abrtd: Successfully sent /tmp/abrt-upload-2012-09-11-14:46:28-2528.tar.gz to scp://root:email@example.com/var/spool/abrt-upload/vmcore-ipa.redhat.local.tar.gz
- I believe we can strip the part before '@' and print only the path
The logging message contained a login and password
The login and password used for uploading reports to ftp were visible in syslog
Don't print the login/password in log messages
Login and password is not visible in syslog
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.