Discuss Fix for Bug #2003179

Saad, Tony Tony.Saad at dell.com
Tue May 16 15:11:56 UTC 2023


Hello,

I am reaching out to start a discussion about Bug #2003179 https://bugs.launchpad.net/cinder/+bug/2003179

The password is getting leaked in plain text from https://opendev.org/openstack/oslo.privsep/src/commit/9c026804de74ae23a60ab3c9565d0c689b2b4579/oslo_privsep/daemon.py#L501. This logger line does not always contain a password so using mask_password() and mask_dict_password() from https://docs.openstack.org/oslo.utils/latest/reference/strutils.html is probably not the best solution.
Anyone have any thoughts on how to stop the password from appearing in plain text?

Thanks,
Tony


Internal Use - Confidential
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.openstack.org/pipermail/openstack-discuss/attachments/20230516/b893bcc0/attachment.htm>


More information about the openstack-discuss mailing list