From fa4d491f8827d5f51c042e93bb905f453be27c45 Mon Sep 17 00:00:00 2001 From: Martin Kolman Date: Fri, 8 Dec 2017 20:20:52 +0100 Subject: [PATCH] Remove in-memory kickstart representation from traceback file (#1519895) We have been doing this filtering already, but some paths have likely changed and the filter was no longer effective. So add two new filter strings: "_intf.storage.ksdata" "_intf.data" After adding these two I was no longer able to find the plaintext password anywhere in the traceback after manually triggering a crash with: kill -USR1 `cat /var/run/anaconda.pid` Resolves: rhbz#1519895 --- anaconda/pyanaconda/exception.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/anaconda/pyanaconda/exception.py b/anaconda/pyanaconda/exception.py index c283a60..483cd51 100644 --- a/anaconda/pyanaconda/exception.py +++ b/anaconda/pyanaconda/exception.py @@ -274,7 +274,9 @@ def initExceptionHandling(anaconda): "_intf._currentAction._spokes[\"UserSpoke\"]._oldweak", "_intf.storage.bootloader.password", "_intf.storage.data", + "_intf.storage.ksdata", "_intf.storage.encryption_passphrase", + "_intf.data", "_bootloader.encrypted_password", "_bootloader.password", "payload._groups"],