From 0a63fff9037848c8c240134fb8fff7e97e958a9d Mon Sep 17 00:00:00 2001
From: Sandro Bonazzola <sbonazzo redhat com>
Date: Tue, 16 Dec 2014 12:32:49 +0000
Subject: [PATCH 28/93] [ovirt] remove password leak from ovirt-engine setup
answer file
Signed-off-by: Sandro Bonazzola <sbonazzo@redhat.com>
Signed-off-by: Bryn M. Reeves <bmr@redhat.com>
---
sos/plugins/ovirt.py | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/sos/plugins/ovirt.py b/sos/plugins/ovirt.py
index 407c918..6e3a092 100644
--- a/sos/plugins/ovirt.py
+++ b/sos/plugins/ovirt.py
@@ -186,4 +186,16 @@ class Ovirt(Plugin, RedHatPlugin):
r'{key}=********'.format(key=key)
)
+ # Answer files contain passwords
+ for key in (
+ 'OVESETUP_CONFIG/adminPassword',
+ 'OVESETUP_CONFIG/remoteEngineHostRootPassword',
+ ):
+ self.do_path_regex_sub(
+ r'/var/lib/ovirt-engine/setup/answers/.*',
+ r'{key}=(.*)'.format(key=key),
+ r'{key}=********'.format(key=key)
+ )
+
+
# vim: expandtab tabstop=4 shiftwidth=4
--
1.9.3