Use of set -x in os-refresh-config scripts results in passwords being logged.

Bug #1298205 reported by Clint Byrum
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Gregory Haynes

Bug Description

An attempt should be made to turn off set -x whenever a secret piece of data is being handled.

Changed in tripleo:
assignee: nobody → Ricardo Carrillo Cruz (rcarrillocruz)
Changed in tripleo:
assignee: Ricardo Carrillo Cruz (rcarrillocruz) → nobody
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-image-elements (master)

Fix proposed to branch: master
Review: https://review.openstack.org/142562

Changed in tripleo:
assignee: nobody → Gregory Haynes (greghaynes)
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-image-elements (master)

Reviewed: https://review.openstack.org/142562
Committed: https://git.openstack.org/cgit/openstack/tripleo-image-elements/commit/?id=262e3ba3cd74b8aeb9ae2e4511bfa9cd1388b42a
Submitter: Jenkins
Branch: master

commit 262e3ba3cd74b8aeb9ae2e4511bfa9cd1388b42a
Author: Gregory Haynes <email address hidden>
Date: Wed Dec 17 11:46:46 2014 -0800

    Disable set -x for passwords

    When we are interacting with passwords we should disable logging.

    Closes-Bug: #1298205

    Change-Id: I101db98c4be9d8c865b7457474a483fedebf281c

Changed in tripleo:
status: In Progress → Fix Committed
Changed in tripleo:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.