| << Back to previous view |
|
[QB-2772] Perforce Password Masking in Command Logging
|
|
| Status: | Resolved |
| Project: | QuickBuild |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | 6.1.21 |
| Type: | Bug | Priority: | Major |
| Reporter: | J. Mash | Assigned To: | Unassigned |
| Resolution: | Fixed | Votes: | 0 |
| Remaining Estimate: | Unknown | Time Spent: | Unknown |
| Original Estimate: | Unknown | ||
| Description |
|
Greetings,
I was reviewing some logs earlier and noticed some inconsistencies in the logging output -- Particularly alarming was the plain-text "password" value in one of the commands: 23:24:00,832 DEBUG - Executing command: p4 -p cgp4-sd.corp.intuit.net:3439 -u jmash -P ****** -c tke.corp.intuit.net-TPS-Main revert -w //... 23:24:00,999 DEBUG - Executing command: sh -c "p4 -p cgp4-sd.corp.intuit.net:3439 -u jmash -P <password> -c tke.corp.intuit.net-TPS-Main clean " The second line should probably be something closer to this: 23:24:00,999 DEBUG - Executing command: p4 -p cgp4-sd.corp.intuit.net:3439 -u jmash -P ****** -c tke.corp.intuit.net-TPS-Main clean Thanks, -J. Mash |