[Openstack-security] [Bug 1472331] Re: Trust id is not hidden in logs

OpenStack Infra 1472331 at bugs.launchpad.net
Thu Jul 9 10:21:05 UTC 2015


Reviewed:  https://review.openstack.org/199407
Committed: https://git.openstack.org/cgit/openstack/murano/commit/?id=8933765635d01c2bcc3f6679e0ab8c0b9e448a3b
Submitter: Jenkins
Branch:    master

commit 8933765635d01c2bcc3f6679e0ab8c0b9e448a3b
Author: Lin Yang <lin.a.yang at intel.com>
Date:   Wed Jul 8 13:53:15 2015 +0800

    Hide TrustId in log to tighten up security
    
    Current the value of TrustId is showed in plaintext in log when murano creates
    trustes and operates with data. So add 'trustid' in token_sanitizer to hide it
    like token and pass.
    
    Closes-Bug: #1472331
    
    Change-Id: I1e9ea8298a7ffd9aa742cf73fada69db3a734712


** Changed in: murano
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1472331

Title:
  Trust id is not hidden in logs

Status in Murano:
  Fix Committed

Bug description:
  When murano creates trustes and operates with data, contains it, the
  value of trust is not hidden:

   "SystemData": {"TrustId": "d5f1261a5a4f482d9c65a01bd385255b"}},
  "token": "*** SANITIZED ***",

  Need to use *** like it's done with token

To manage notifications about this bug go to:
https://bugs.launchpad.net/murano/+bug/1472331/+subscriptions




More information about the Openstack-security mailing list