Tim Speetjens has uploaded a new change for review.

Change subject: sos: obfuscate passwords specified in aaa profiles
......................................................................

sos: obfuscate passwords specified in aaa profiles

With aaa profiles configured in /etc/ovirt-engine/aaa, all
.properties files in this directory potentially contain passwords
in lines like:
vars.password = <password>

Change-Id: Id88fbeb6f2a013c59302ad621fa268ad223879c4
Bug-Url: https://bugzilla.redhat.com/1227019
Signed-off-by: Tim Speetjens <tim.speetj...@gmail.com>
---
M src/sos/plugins/ovirt.py
1 file changed, 6 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-log-collector 
refs/changes/09/41809/1

diff --git a/src/sos/plugins/ovirt.py b/src/sos/plugins/ovirt.py
index a89e3a8..4eb4e38 100644
--- a/src/sos/plugins/ovirt.py
+++ b/src/sos/plugins/ovirt.py
@@ -200,5 +200,11 @@
                 r'{key}=********'.format(key=key)
             )
 
+        # Obfuscate passwords in aaa extension profiles
+        self.do_path_regex_sub(
+            r'/etc/ovirt-engine/aaa/.*\.properties',
+            r'vars.password *= *(.*)',
+            r'vars.password = ******'
+        )
 
 # vim: expandtab tabstop=4 shiftwidth=4


-- 
To view, visit https://gerrit.ovirt.org/41809
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Id88fbeb6f2a013c59302ad621fa268ad223879c4
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-log-collector
Gerrit-Branch: master
Gerrit-Owner: Tim Speetjens <tim.speetj...@redhat.com>
_______________________________________________
Engine-patches mailing list
Engine-patches@ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to