Skip to content

Commit

Permalink
Do not leak the OPAL_PBA_DEBUG_PASSWORD value into the log file
Browse files Browse the repository at this point in the history
In prep/OPALPBA/Linux-i386/001_configure_workflow.sh
run commands that deal with OPAL_PBA_DEBUG_PASSWORD
in a confidential way via { confidential_command ; } 2>/dev/null
see #2967
  • Loading branch information
jsmeix committed May 12, 2023
1 parent e1b6a92 commit 64dd3ba
Showing 1 changed file with 1 addition and 1 deletion.
Expand Up @@ -36,7 +36,7 @@ if (( ${#OPAL_PBA_PROGS[@]} == 0 && ${#OPAL_PBA_COPY_AS_IS[@]} == 0)) && has_bin
LogPrintError " interface for the PBA by setting OPAL_PBA_{PROGS,COPY_AS_IS,LIBS} to include Plymouth components."
fi
PROGS+=( "${OPAL_PBA_PROGS[@]}" clear )
[[ -n "$OPAL_PBA_DEBUG_PASSWORD" ]] && REQUIRED_PROGS+=( openssl )
{ test "$OPAL_PBA_DEBUG_PASSWORD" ; } 2>/dev/null && REQUIRED_PROGS+=( openssl )
COPY_AS_IS+=( "${OPAL_PBA_COPY_AS_IS[@]}" )
LIBS+=( "${OPAL_PBA_LIBS[@]}" )

Expand Down

0 comments on commit 64dd3ba

Please sign in to comment.