When running sosreport our cephx authentication key is visible in plain text in qemu logs and ps outputs
Issue
- When running sosreport the cephx authentication key is visible in plain text in the following files within the sosreport tarball:
./sos_commands/process/ps_auxwww
./sos_commands/process/ps_auxwww
./sos_commands/process/ps_auxwwwm
./sos_commands/process/ps_auxwwwm
./sos_commands/process/ps_alxwww
./sos_commands/process/ps_alxwww
./sos_commands/process/ps_axo_flags_state_uid_pid_ppid_pgid_sid_cls_pri_addr_sz_wchan_stime_tty_time_cmd
./sos_commands/process/ps_axo_flags_state_uid_pid_ppid_pgid_sid_cls_pri_addr_sz_wchan_stime_tty_time_cmd
./var/log/libvirt/qemu/instance-xxxxxxxx.log
Environment
- Red Hat Enterprise Linux
- sos-3.2-28
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.