Project

General

Custom queries

Profile

Actions
Copy link

Bug #27481

closed

Secrets should be hidden

Added by Adam Ruzicka almost 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Adam Ruzicka
Category:
Foreman
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
1701942
Pull request:
https://github.com/theforeman/foreman_remote_execution/pull/425
Fixed in Releases:
foreman_remote_execution 2.0.0
Found in Releases:
Red Hat JIRA:

Description

Secrets, such as sudo password do currently show up in task export.

Also if the password is set globally in settings, it is stored encrypted but still shown in its plain form in the web ui. Workaround for this is to declare it as a global parameter instead, where this issue is not present.

Related issues 2 (0 open — 2 closed)

Related to Ansible - Bug #27491: Ensure ssh and sudo passwords are not leaked in task exportClosedAdam RuzickaActions
Related to Foreman - Bug #29044: Settings should have their value hidden in API if they are encryptedClosedAdam RuzickaActions
Actions
Copy link
 #5

Updated by Anonymous over 5 years ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link

Also available in: Atom PDF