[virt-tools-list] [virt-manager PATCH 0/2] unattended: Don't expose user & admin passwords

Fabiano Fidêncio fidencio at redhat.com
Tue Jul 2 19:21:43 UTC 2019


Let's not expose user & admin passwords neither by having an option to
be used to set those passwords nor in the debug messages.

'CVE-2019-10183' has been assigned to the virt-install --unattended
admin-password=xxx disclosure issue.

Fabiano Fidêncio (2):
  unattended: Read the passwords from a file
  unattended: Don't log user & admin passwords

 man/virt-install.pod                  | 14 +++++++---
 tests/cli-test-xml/admin-password.txt |  1 +
 tests/cli-test-xml/user-password.txt  |  3 +++
 tests/clitest.py                      | 18 +++++++------
 virtinst/cli.py                       |  4 +--
 virtinst/install/unattended.py        | 38 ++++++++++++++++++---------
 6 files changed, 52 insertions(+), 26 deletions(-)
 create mode 100644 tests/cli-test-xml/admin-password.txt
 create mode 100644 tests/cli-test-xml/user-password.txt

-- 
2.21.0




More information about the virt-tools-list mailing list