WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: [Xen-devel] [PATCH] Scrub VNC passwords from XenD log files

To: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Subject: Re: [Xen-devel] [PATCH] Scrub VNC passwords from XenD log files
From: Ewan Mellor <ewan@xxxxxxxxxxxxx>
Date: Wed, 6 Dec 2006 17:24:36 +0000
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 06 Dec 2006 09:24:33 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <20061206171603.GA13126@xxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <20061205193125.GF21067@xxxxxxxxxx> <20061206122520.GE17323@xxxxxxxxxxxxxxxxxxxxxx> <20061206171603.GA13126@xxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.5.9i
On Wed, Dec 06, 2006 at 05:16:03PM +0000, Daniel P. Berrange wrote:

> I didn't add the signed-off-by because the patch isn't finished - I really 
> just wanted to see if people were amenable to this kind of approach before
> doing more work on it. Since you like it, I'll finish it off shortly - there
> just a couple more test cases I need to go through - suspend/restore & 
> inactive
> domains - to verify passwords are always scrubbed correctly. I'll post a final
> version of the patch by the end of today if all goes to plan.

Great, thanks.  I think you're right that this is the best of all the
available options, fiddly though it is.  Perhaps we could write a final check
at the end of xm-test, to make sure that "vncpasswd" doesn't appear in the
logs anywhere -- that would make sure that this never regresses.

Ewan.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel