Amrith Kumar c906dccefc Mask passwords in exceptions and error messages
When a ProcessExecutionError is thrown by processutils.execute(), the
exception may contain information such as password. Upstream
applications that just log the message (as several appear to do) could
inadvertently expose these passwords to a user with read access to the
log files. It is therefore considered prudent to invoke
strutils.mask_password() on the command, stdout and stderr in the
exception. A test case has been added to ensure that all three are
properly masked.

OSSA is aware of this change request.

Originally-Submitted-In: I173dfb865e84eb7dee54a22c76db1e4f125a0a8a

Change-Id: Ie122db5f19802f519b96ed024ab3f2b5eede3eee
Closes-Bug: #1343604
2014-08-20 17:47:02 -04:00
2014-08-16 00:15:34 +04:00
2014-08-07 22:27:31 +04:00
2014-08-16 00:15:34 +04:00
2014-08-07 22:27:31 +04:00
2014-08-07 22:27:31 +04:00
2014-08-07 22:27:31 +04:00
2014-08-07 22:27:31 +04:00
2014-08-16 00:15:34 +04:00
2014-08-16 00:15:34 +04:00

oslo.concurrency

oslo.concurrency library

Description
OpenStack library for all concurrency-related code
Readme 4.7 MiB
Languages
Python 100%