View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0000116 | opensim-SC | Bug | public | 2019-09-09 02:17 | 2021-08-26 17:11 |
Reporter | onefang | Assigned To | onefang | ||
Priority | urgent | Severity | text | Reproducibility | always |
Status | resolved | Resolution | fixed | ||
Target Version | 0.9.1.1 | Fixed in Version | 0.9.1.1 | ||
Summary | 0000116: Blank out passwords from commands in the logs. | ||||
Description | OpenSim used to do this. | ||||
Tags | No tags attached. | ||||
It never blanked out passwords in save iar commands that are stuffed into history. Though OpenSim/Framework/Console/LocalConsole.cs has this - [code=c#] // If we're not echoing to screen (e.g. a password) then we probably don't want it in history [/code] So "save iar" is the command needed to be blanked out. "create user" and "reset user password" can both have the password left out, which will then prompt for them, which should trigger the above "not echoing to screen". I'm not seeing anything in logs, but I might be missing them. |
|
Just making the logs unreadable by group and others should suffice for now. | |
Date Modified | Username | Field | Change |
---|---|---|---|
2019-09-09 02:17 | onefang | New Issue | |
2019-09-09 02:17 | onefang | Status | new => assigned |
2019-09-09 02:17 | onefang | Assigned To | => onefang |
2019-09-09 02:18 | onefang | Summary | Blaank out passwords from commands in the logs. => Blank out passwords from commands in the logs. |
2021-08-10 23:44 | onefang | Target Version | 0.9.0.2 => 0.9.1.1 |
2021-08-13 02:06 | onefang | Priority | normal => high |
2021-08-26 00:43 | onefang | Priority | high => urgent |
2021-08-26 17:08 | onefang | Note Added: 0000495 | |
2021-08-26 17:11 | onefang | Status | assigned => resolved |
2021-08-26 17:11 | onefang | Resolution | open => fixed |
2021-08-26 17:11 | onefang | Fixed in Version | => 0.9.1.1 |
2021-08-26 17:11 | onefang | Note Added: 0000496 |