Please open an issue against xcat-core for this. I feel bmcdiscover should redact passwords either passed in or pulled from table.
Mark Gurevich Poughkeepsie Development Lab HPC Software Development - xCAT "If we knew what it was we were doing, it would not be called research, would it?" --Albert Einstein From: Lachlan Musicman <[email protected]> To: xCAT Users Mailing list <[email protected]> Date: 12/19/2019 08:07 AM Subject: Re: [xcat-user] [External] bmcdiscover logs passwords On Thu, 19 Dec 2019 at 10:49, Jarrod Johnson <[email protected]> wrote: > > On a related note, we did do some redaction in the Lenovo branch: > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_xcat2_xcat-2Dcore_commit_7a06672320d62644fe7e6f695c27f51151820b9f&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=cGs4a-jfx6Emudek2Wdi4FLq2XKm1pvrlbCQ-h7Qq7A&m=cugF79XwesP3cC0gpbQ58R9TYsctJRyK_sH4xOW4GS8&s=nZoVD-wq-qrc2Zq6-5Qotd6fuCcTsyPufkMA9w4jLRs&e= > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_xcat2_xcat-2Dcore_commit_9d318cca7626451f97c691053f9965523e596640&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=cGs4a-jfx6Emudek2Wdi4FLq2XKm1pvrlbCQ-h7Qq7A&m=cugF79XwesP3cC0gpbQ58R9TYsctJRyK_sH4xOW4GS8&s=cktG5DE3VOPp_0JsNwCs_S0SZ_nqoj1P82pyiDWHfAY&e= > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_xcat2_xcat-2Dcore_commit_08eeb047255655ca11c14896d1acce8787a17282&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=cGs4a-jfx6Emudek2Wdi4FLq2XKm1pvrlbCQ-h7Qq7A&m=cugF79XwesP3cC0gpbQ58R9TYsctJRyK_sH4xOW4GS8&s=LlzGRympitxYuxVZMf6PeAZxIwSJyLGzFUkz4TRSB2s&e= Ok, so I'm not the only one that thinks this is unusual. Should I put in an issue against xcat-core: - for the bmcdiscover documentation to note that passwords passed on the command line will be logged (responsible disclosure) or - for bmcdiscover to redact passwords passed on the command line? cheers L. _______________________________________________ xCAT-user mailing list [email protected] https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_xcat-2Duser&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=cGs4a-jfx6Emudek2Wdi4FLq2XKm1pvrlbCQ-h7Qq7A&m=cugF79XwesP3cC0gpbQ58R9TYsctJRyK_sH4xOW4GS8&s=t8ezKUP3LfQmYtEoggbsRLA8Lvo8UuEiP7Qe6o1lCcg&e=
_______________________________________________ xCAT-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/xcat-user
