[Openstack-security] [Bug 1472331] Re: Trust id is not hidden in logs

OpenStack Infra 1472331 at bugs.launchpad.net
Fri Jul 10 15:12:27 UTC 2015


Reviewed:  https://review.openstack.org/200286
Committed: https://git.openstack.org/cgit/openstack/murano/commit/?id=484fc244c99968738eb53815174b90dbb8e93554
Submitter: Jenkins
Branch:    stable/kilo

commit 484fc244c99968738eb53815174b90dbb8e93554
Author: Lin Yang <lin.a.yang at intel.com>
Date:   Wed Jul 8 13:53:15 2015 +0800

    Hide TrustId in log to tighten up security
    
    Current the value of TrustId is showed in plaintext in log when murano creates
    trustes and operates with data. So add 'trustid' in token_sanitizer to hide it
    like token and pass.
    
    Closes-Bug: #1472331
    
    Change-Id: I1e9ea8298a7ffd9aa742cf73fada69db3a734712


** Changed in: murano/kilo
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1472331

Title:
  Trust id is not hidden in logs

Status in murano:
  Fix Committed
Status in murano kilo series:
  Fix Committed

Bug description:
  When murano creates trustes and operates with data, contains it, the
  value of trust is not hidden:

   "SystemData": {"TrustId": "d5f1261a5a4f482d9c65a01bd385255b"}},
  "token": "*** SANITIZED ***",

  Need to use *** like it's done with token

To manage notifications about this bug go to:
https://bugs.launchpad.net/murano/+bug/1472331/+subscriptions




More information about the Openstack-security mailing list