messages/MMonCommand, MMonCommandAck: don't log values for "config set" and "config...
authorNeha Ojha <nojha@redhat.com>
Thu, 3 Dec 2020 19:18:04 +0000 (19:18 +0000)
committerBastien Roucariès <rouca@debian.org>
Sat, 21 Oct 2023 16:42:26 +0000 (17:42 +0100)
commit97df50063b8fb7de0bb7e11ce844f6f590b959fa
tree3617ea2610e0825c5978a43e172aab9125420b15
parentb4873c149f740b331f5309082fc1796ae5c72eee
messages/MMonCommand, MMonCommandAck: don't log values for "config set" and "config-key set"

This acts like a big hammer to avoid adding sensitive information, like passwords
into mon/mgr/cluster logs when using "config set" and "config-key set" to set keys
whose values should be secure.

Fixes: https://tracker.ceph.com/issues/37503
Signed-off-by: Neha Ojha <nojha@redhat.com>
(cherry picked from commit 3d54660ca1a9a7ae54e884c3181fca17a40d8cd3)

Origin: upstream, https://github.com/ceph/ceph/pull/38614/commits/b579cddca07a19d8de2613eb7713de9e33d67d0d

Gbp-Pq: Name CVE-2020-25678-1.patch
src/messages/MMonCommand.h
src/messages/MMonCommandAck.h