View Issue Details

IDProjectCategoryView StatusLast Update
0000116opensim-SCBugpublic2021-08-26 17:11
Reporteronefang Assigned Toonefang  
PriorityurgentSeveritytextReproducibilityalways
Status resolvedResolutionfixed 
Target Version0.9.1.1Fixed in Version0.9.1.1 
Summary0000116: Blank out passwords from commands in the logs.
DescriptionOpenSim used to do this.
TagsNo tags attached.

Activities

onefang

onefang

2021-08-26 17:08

administrator   ~0000495

It never blanked out passwords in save iar commands that are stuffed into history.

Though OpenSim/Framework/Console/LocalConsole.cs has this -

[code=c#] // If we're not echoing to screen (e.g. a password) then we probably don't want it in history [/code]

So "save iar" is the command needed to be blanked out. "create user" and "reset user password" can both have the password left out, which will then prompt for them, which should trigger the above "not echoing to screen".

I'm not seeing anything in logs, but I might be missing them.
onefang

onefang

2021-08-26 17:11

administrator   ~0000496

Just making the logs unreadable by group and others should suffice for now.

Issue History

Date Modified Username Field Change
2019-09-09 02:17 onefang New Issue
2019-09-09 02:17 onefang Status new => assigned
2019-09-09 02:17 onefang Assigned To => onefang
2019-09-09 02:18 onefang Summary Blaank out passwords from commands in the logs. => Blank out passwords from commands in the logs.
2021-08-10 23:44 onefang Target Version 0.9.0.2 => 0.9.1.1
2021-08-13 02:06 onefang Priority normal => high
2021-08-26 00:43 onefang Priority high => urgent
2021-08-26 17:08 onefang Note Added: 0000495
2021-08-26 17:11 onefang Status assigned => resolved
2021-08-26 17:11 onefang Resolution open => fixed
2021-08-26 17:11 onefang Fixed in Version => 0.9.1.1
2021-08-26 17:11 onefang Note Added: 0000496