[ 
https://issues.apache.org/jira/browse/AMBARI-15496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15253136#comment-15253136
 ] 

Hudson commented on AMBARI-15496:
---------------------------------

SUCCESS: Integrated in Ambari-trunk-Commit #4709 (See 
[https://builds.apache.org/job/Ambari-trunk-Commit/4709/])
AMBARI-15496. (afernandez: 
[http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=360fcfeb82d45cb0db0ce3e857ab2ac327d7ca99])
* ambari-agent/src/test/python/ambari_agent/TestClusterConfigurationCache.py
* ambari-agent/src/main/python/ambari_agent/ClusterConfiguration.py
* ambari-agent/src/test/python/ambari_agent/TestAlerts.py


> /var/lib/ambari-agent/cache/cluster_configuration/configurations.json file 
> contains various passwords in plain text in world readable file
> ------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-15496
>                 URL: https://issues.apache.org/jira/browse/AMBARI-15496
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-agent
>    Affects Versions: 2.1.0, 2.2.0, 2.2.1
>            Reporter: Austin Clifford
>            Assignee: Shantanu Mundkur
>              Labels: security
>             Fix For: trunk
>
>         Attachments: AMBARI-15496-2.patch, AMBARI-15496.patch, 
> AMBARI-15496.patch
>
>
> Various passwords are in plain text in world readable configurations.json file
> $ ls -altr 
> /var/lib/ambari-agent/cache/cluster_configuration/configurations.json
> -rw-r--r-- 1 root root 176342 Mar  4 08:55 
> /var/lib/ambari-agent/cache/cluster_configuration/configurations.json



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to