Blank out passwords from commands in the logs. 🔼
OpenSim used to do this.
reported=2019-09-09 02:17:47
reporter=onefang
priority=urgent
category=Bug
severity=text
resolution=fixed
2021-08-26 17:08:23 onefang: It never blanked out passwords in save iar commands that are stuffed into history.
Though OpenSim/Framework/Console/LocalConsole.cs has this -
[code=C#]
// If we're not echoing to screen (e.g. a password) then we probably don't want it in history
[/code]
So "save iar" is the command needed to be blanked out. "create user" and "reset user password" can both have the password left out, which will then prompt for them, which should trigger the above "not echoing to screen".
I'm not seeing anything in logs, but I might be missing them.
2021-08-26 17:11:13 onefang: Just making the logs unreadable by group and others should suffice for now.