Re: [virt-manager PATCH 2/2] unattended: Don't log user & admin passwords

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 7/3/19 2:16 PM, Peter Crowther wrote:
> It's an information disclosure vulnerability - if I happen to use a
> password that matches something in the script, then a diligent reader of
> the log file can discern my password.
> 
> Of course, I shouldn't be using that weak a password. But people do. 
> 

The pushed patch fixed this issue

Thanks,
Cole

_______________________________________________
virt-tools-list mailing list
virt-tools-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/virt-tools-list




[Index of Archives]     [Linux Virtualization]     [KVM Development]     [CentOS Virtualization]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite Forum]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]     [Video 4 Linux]

  Powered by Linux