Ran test in Xenial LXD container:
# dpkg -l | grep sosreport
ii sosreport 3.6-1ubuntu0.16.04.1
amd64 Set of tools to gather troubleshooting data from
a system
# apt-cache policy sosreport
sosreport:
Installed: 3.6-1ubuntu0.16.04.1
Candidate: 3.6-1ubuntu0.16.04.1
Version table:
*** 3.6-1ubuntu0.16.04.1 500
500 http://ppa.launchpad.net/slashd/srusosreport/ubuntu xenial/main
amd64 Packages
100 /var/lib/dpkg/status
3.5-1~ubuntu16.04.3 500
500 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
3.2+git276-g7da50d6-3ubuntu1 500
500 http://archive.ubuntu.com/ubuntu xenial/main amd64 Packages
# sosreport -a
[...]
Setting up archive ...
Setting up plugins ...
caught exception in plugin method "juju.setup()"
writing traceback to sos_logs/juju-plugin-errors.txt
[plugin:kvm] debugfs not mounted and mount attempt failed
mysql.dbdump: database user name and password must be supplied
Running plugins. Please wait ...
Finishing plugins [Running: lxd]
Finished running plugins
[...]
This is my primary Landscape quickstart server running in a LXD
container.
I'm seeing non-sanitised password in the Landscape service.conf file:
$ cat sosreport-xeniallandscape-20181112170402/etc/landscape/service.conf |
grep pass
password = b64:MC1[removed for Launchpad paste]==
password = b64:M1B[removed for Launchpad paste]==
store_password = b64:bWp[removed for Launchpad paste]==
I had just seen a previous sosreport with version 3.5-1~ubuntu16.04.3
that was sanitising properly:
$ cat sosreport-[removed for
Launchpad]-20181112140259/etc/landscape/service.conf | grep password
password = [********]
password = [********]
store_password = [********]
We should investigate this further.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1775195
Title:
[sync][sru]sosreport v3.6
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sosreport/+bug/1775195/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
