Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-19241

fix: add no_log: true for tasks that can log secret data

    • rhel-system-roles-1.23.0-2.4.el9
    • None
    • None
    • rhel-sst-system-roles
    • 21
    • 26
    • None
    • QE ack, Dev ack
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Red Hat Enterprise Linux
    • None
    • Bug Fix
    • Hide
      Cause: Some tasks handle secret data and log the contents.

      Consequence: The logs can show secret data if verbose logging
      is used.

      Fix: Add the `no_log: true` directive to tasks that can log
      secret data.

      Result: Secret data is not logged with verbose logging.

      Some of the tests use Ansible vault for passwords.

      Signed-off-by: Rich Megginson <rmeggins@redhat.com>
      Show
      Cause: Some tasks handle secret data and log the contents. Consequence: The logs can show secret data if verbose logging is used. Fix: Add the `no_log: true` directive to tasks that can log secret data. Result: Secret data is not logged with verbose logging. Some of the tests use Ansible vault for passwords. Signed-off-by: Rich Megginson < rmeggins@redhat.com >
    • Proposed
    • None

      Cause: Some tasks handle secret data and log the contents.

      Consequence: The logs can show secret data if verbose logging
      is used.

      Fix: Add the `no_log: true` directive to tasks that can log
      secret data.

      Result: Secret data is not logged with verbose logging.

      Some of the tests use Ansible vault for passwords.

      Signed-off-by: Rich Megginson <rmeggins@redhat.com>

              rmeggins@redhat.com Richard Megginson
              rmeggins@redhat.com Richard Megginson
              Richard Megginson Richard Megginson
              Jakub Haruda Jakub Haruda
              Gabriela Necasova Gabriela Necasova
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: