Details
-
Improvement
-
Resolution: Fixed
-
Blocker
-
2.0, 2.2.0
-
Security Level: Public
-
12/Aug - 30/Aug
Description
customers attached logs to bugs, that is not safe for them and it's a bad practice
example:
"port_listen=11211,default_bucket_name=default,downstream_max=1024,downstream_conn_max=4,connect_max_errors=5,connect_retry_interval=30000,connect_timeout=400,auth_timeout=100,cycle=200,downstream_conn_queue_timeout=200,downstream_timeout=5000,wait_queue_timeout=200",
"-z",
"url=http://127.0.0.1:8091/pools/default/saslBucketsStreaming",
"-p","0","-Y","y","-O","stderr",[]],
[{env,
[
,
,
]},
use_stdio,exit_status,port_server_send_eol,
stderr_to_stdout,stream]}},
{mfargs,
{supervisor_cushion,start_link,
[moxi,5000,ns_port_server,start_link,
[moxi,"/opt/couchbase/bin/moxi",
["-Z",
I guess password in logs should be changed on ****.
Attachments
Issue Links
- is duplicated by
-
MB-8704 cbcollect_info output should not contain clear text password
- Closed
For Gerrit Dashboard: MB-5904 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
28042,5 | MB-5904 remove passwords from babysitter logs | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28043,5 | MB-5904 remove passwords from XDCR logs | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28051,3 | MB-5904: don't log bucket config that libvbucket didn't like | master | moxi | Status: MERGED | +2 | +1 |
28091,3 | MB-5904 remove passwords from ns_config log traces | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28108,1 | Merge remote-tracking branch 'origin/2.2.0' | master | ns_server | Status: MERGED | +2 | +1 |
28156,2 | MB-5904 remove passwords from rebalance log output | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28219,1 | Merge remote-tracking branch 'couchbase/2.2.0' | master | ns_server | Status: MERGED | +2 | +1 |
28233,2 | MB-5904 remove passwords from cbcollect_info results | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28254,3 | MB-5904: sanitize process backtraces | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28260,1 | Merge remote-tracking branch 'origin/2.2.0' | master | ns_server | Status: MERGED | +2 | +1 |
28263,1 | Merge remote-tracking branch 'origin/2.2.0' | master | ns_server | Status: MERGED | +2 | +1 |
28270,3 | MB-5904 - change ns_config format of rouser credentials | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28277,2 | MB-5904 remove passwords from xdc status logging | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28302,1 | Merge remote-tracking branch 'origin/2.2.0' | master | ns_server | Status: MERGED | +2 | +1 |
28378,4 | MB-5904 remove passwords from ns_config state | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28387,1 | Merge remote-tracking branch 'origin/2.2.0' | master | ns_server | Status: MERGED | +2 | +1 |
28412,2 | MB-5904 Filter out password for email alerts too. | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28413,2 | MB-5904 Filter out admin_pass and pass in cbcollect_info. | 2.2.0 | ns_server | Status: MERGED | +2 | +1 |
28433,1 | Merge remote-tracking branch 'origin/2.2.0' | master | ns_server | Status: MERGED | +2 | +1 |